updates security.yml to include providers