Update security.yml

Minor fix