Update security.yml

Not sure about correctness of update.