Update security.yml for sf2.3, rename