Security upgrades not marked as such in yum packages.

In the admin interface today's update is marked as a security update (update ASAP). So I ran

 --> gitlab-ce-12.2.4-ce.0.el7.x86_64 from @gitlab_gitlab-ce removed (updateinfo)
 --> gitlab-ce-12.2.5-ce.0.el7.x86_64 from gitlab_gitlab-ce removed (updateinfo)
No packages needed for security; 1 packages available
Resolving Dependencies

and noticed the update is not marked as a security update, just as a normal update.

Please mark security updates as such so the package management system can treat them as such. This is required for automated updates with yum-cron.