Updated security.yml
Added password-compat
ignore