---
- name: ensure securedrop-app-code package is installed from repo
  apt:
    pkg: securedrop-app-code
    state: present
  tags:
    - apt

---
- name: Install securedrop-app-code package from FPF repo.
  apt:
    pkg: securedrop-app-code
    state: latest
    update_cache: yes
    cache_valid_time: 3600
  tags:
    - apt

Install latest version of securedrop-app-code
Install latest version of securedrop-app-code

Previously the task was only checking for "present" state for the
securedrop-app-code package, when what we really want is to ensure the
"latest" package is installed. Elsewhere in the playbook the "latest"
state is ensured via an `apt-get safe-upgrade`, but let's be explicit
instead.
