add security scan for path