config is in debsecan 0.4.19.
This file is a maintainer script. It is executed when installing (*inst) or removing (*rm) the package.
The actual contents of the file can be viewed below.
| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 | #!/bin/bash
set -e
. /usr/share/debconf/confmodule
db_capb backup
CONFFILE=/etc/default/debsecan
CRONFILE=/etc/cron.d/debsecan
normalize_suite () {
    case "$SUITE" in
	wheezy|jessie|stretch|buster|sid)
	    ;;
	*)
	    SUITE=GENERIC
	    ;;
    esac
}
read_existing_configuration () {
    if test -r "$CONFFILE" ; then
	. "$CONFFILE" || true
	normalize_suite
	if test ! -z "$REPORT" ; then
	    db_set debsecan/report "$REPORT"
	fi
	if test -z "$MAILTO" ; then
	    db_set debsecan/mailto root
	else
	    db_set debsecan/mailto "$MAILTO"
	fi
	for var in SUITE SOURCE ; do
	    db_set debsecan/$(echo $var | tr A-Z a-z) ${!var}
	done
    fi
}
read_existing_configuration
maybe_input () {
    db_get debsecan/report
    if test "$RET" = true ; then
	db_input "$@" || true
    fi
}
STATE=1
while true; do
    case "$STATE" in
	1)
	    db_input medium debsecan/suite || true
	    ;;
	2)
	    db_input low debsecan/report || true
	    ;;
	3)
	    db_get debsecan/report
	    maybe_input low debsecan/mailto || true
	    ;;
	4)
	    db_get debsecan/report
	    db_input low debsecan/source || true
	    ;;
	*)
	    break
	    ;;
    esac
    if db_go; then
	STATE=$(($STATE + 1))
    else
	STATE=$(($STATE - 1))
    fi
done
if test $STATE -eq 1 ; then
    exit 10
fi
 |