I’’m thinking worklet might be the only way to run the security audit tool scans at scale. I’m looking at Lynis - https://cisofy.com/lynis/
Long term- I’d like to ship the Lynis scan report to one central location and create alerting/monitoring from that.
Any suggestions ?