There seems to be a mix of ansible and bash for fix-up scripts, in that some rules only have bash fixes, others only have ansible fixes, while most have both, and a few still have none.  When applying remediation during a scan, which ones get used?  Is there a way to specify?  If I have ansible installed, will the ansible fixes automatically get used?  If the ansible ones are being used?  Do the bash-only fixes get run as well?  What about rules that have both?

Chuck Atkins
Staff R&D Engineer, Scientific Computing
Kitware, Inc.