Ansible

Ansible

Made by DeepSource

Mercurial checkouts should have explicit revision ANS-E4002

Bug risk
Major

All version control checkouts must point to an explicit commit or tag, not just latest.

Relying on latest may lead to breakages in the application if the latest version is unstable or not meant for use with the current system.

Bad practice

- hg:
    repo: https://bitbucket.org/user/repo1
    dest: /home/user/repo1
    revision: latest
    purge: yes

Recommended

- hg:
    repo: https://bitbucket.org/user/repo1
    dest: /home/user/repo1
    revision: v1.2.3
    purge: yes