add security tasks and update submodule