Update security.yml