From d2bf2ed418de4e86ffe46b0b060c028ac30d0ef7 Mon Sep 17 00:00:00 2001
From: Alexandre Pires <c.alexandre.pires@gmail.com>
Date: Sat, 28 Sep 2024 23:24:08 +0200
Subject: [PATCH] Refactor sshconfig.yml to set ssh version as fact only when
 ssh_version.stderr is not empty

---
 ansible/roles/cis/tasks/sshconfig.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ansible/roles/cis/tasks/sshconfig.yml b/ansible/roles/cis/tasks/sshconfig.yml
index 1e2fa03..c3dd06d 100644
--- a/ansible/roles/cis/tasks/sshconfig.yml
+++ b/ansible/roles/cis/tasks/sshconfig.yml
@@ -13,6 +13,7 @@
 - name: Set ssh version as fact
   ansible.builtin.set_fact:
     ssh_installed_version: "{{ ssh_version.stderr | regex_search('^OpenSSH_([0-9+].[0-9]+)', '\\1') | join('.') | float }}" # noqa jinja[spacing]
+  when: ssh_version.stderr != ""
   tags:
     - roles::cis::sshd
     - sshd