Update to security.yml