diff --git a/.gitea/workflows/security.yml b/.gitea/workflows/security.yml
index 9854461..165d265 100644
--- a/.gitea/workflows/security.yml
+++ b/.gitea/workflows/security.yml
@@ -8,11 +8,13 @@ on:
   schedule:
     - cron: '0 4 * * 1'   # Mondays 04:00 UTC
 
+# Reusable workflows live in JonKazama-Hellion/security-workflows
+# (the security-workflows repo is in the personal account, not in either org).
 jobs:
   semgrep:
-    uses: Hellion-Forge/security-workflows/.gitea/workflows/semgrep.yml@main
+    uses: JonKazama-Hellion/security-workflows/.gitea/workflows/semgrep.yml@main
     # If you need to exclude specific rules or paths, drop a .semgrep-exclude.yml
     # at the repo root. The reusable workflow honors it.
 
   trivy:
-    uses: Hellion-Forge/security-workflows/.gitea/workflows/trivy.yml@main
+    uses: JonKazama-Hellion/security-workflows/.gitea/workflows/trivy.yml@main