We cannot access the code for challenge/settings-security. Some tips to debug this problem:

• Is settings-security private? You need to
  to run on private repositories.
• Is challenge and settings-security spelled correctly?