diff --git a/README.md b/README.md
index e650e71..d73b587 100644
--- a/README.md
+++ b/README.md
@@ -1,7 +1,7 @@
 # Readme
 
 [![Build Status](https://jenkins.confdroid.com/buildStatus/icon?job=confdroid_firewall&style=plastic)](https://jenkins.confdroid.com/job/confdroid_firewall/)
-
+[![Security Hotspots](https://sonarqube.confdroid.com/api/project_badges/measure?project=confdroid_firewall&metric=security_hotspots&token=sqb_496a81156409d128d9f664bdf76c4121eb26deaa)](https://sonarqube.confdroid.com/dashboard?id=confdroid_firewall)
 [![Ask DeepWiki](https://deepwiki.com/badge.svg)](https://deepwiki.com/grizzlycoda/puppet_collection)
 
 - [Readme](#readme)
diff --git a/manifests/main/config.pp b/manifests/main/config.pp
index 5e50357..f5794dd 100644
--- a/manifests/main/config.pp
+++ b/manifests/main/config.pp
@@ -6,4 +6,5 @@
 class confdroid_firewall::main::config (
 
 ) inherits confdroid_firewall::params {
+  include confdroid_firewall::main::install
 }
diff --git a/manifests/main/install.pp b/manifests/main/install.pp
new file mode 100644
index 0000000..1da07b6
--- /dev/null
+++ b/manifests/main/install.pp
@@ -0,0 +1,12 @@
+#### confdroid_firewall::main::install.pp
+# Module name: confdroid_firewall
+# Author: 12ww1160 (12ww1160@confdroid.com)
+# @summary Class manages installation logic for the confdroid_firewall module
+###############################################################################
+class confdroid_firewall::main::install (
+
+) inherits confdroid_firewall::params {
+  package { $fw_req_packages:
+    ensure => $fw_pkg_ensure,
+  }
+}
diff --git a/manifests/params.pp b/manifests/params.pp
index f40e7d8..0d15680 100644
--- a/manifests/params.pp
+++ b/manifests/params.pp
@@ -7,6 +7,7 @@
 ##############################################################################
 class confdroid_firewall::params (
 
+  # Installation
   Array $fw_req_packages  = ['nftables','iptables-nft'],
   String $fw_pkg_ensure   = 'present',