cleaned up security.yml