repository – Centos 7 can’t deploy local repo for the security

Is there any step is missing?
I still can’t get any result
And the status of repolist is 0

#yum list-sec
Loaded plugins: changelog, fastestmirror
Loading mirror speeds from cached hostfile
 * base: mirror-hk.koddos.net
 * centos-sclo-rh: mirror-hk.koddos.net
 * centos-sclo-sclo: ftp.sjtu.edu.cn
 * epel: ftp.iij.ad.jp
 * extras: mirror-hk.koddos.net
 * updates: mirror-hk.koddos.net
updateinfo list done

#yum list updates --security
No packages needed for security; 0 packages available

#yum updateinfo
Loaded plugins: changelog, fastestmirror
Loading mirror speeds from cached hostfile
 * base: mirror-hk.koddos.net
 * centos-sclo-rh: mirror-hk.koddos.net
 * centos-sclo-sclo: ftp.sjtu.edu.cn
 * epel: ftp.iij.ad.jp
 * extras: mirror-hk.koddos.net
 * updates: mirror-hk.koddos.net
updateinfo summary done

#yum repolist
repo id     repo name                   status
security    CentOS-7 - Security(local)       0

Below is my step to create a local repo for the bug fix
I am use the python to generate the updateinfo.xml

wget --progress=dot -N -P./tmp http://cefs.steve-meier.de/errata.latest.xml.bz2
./generate_updateinfo.py -r 7 -d ./tmp -s all -t all <(bzcat ./tmp/errata.latest.xml.bz2) &> /dev/null

mkdir -y /var/repo_local
createrepo /var/repo_local
modifyrepo ./tmp/updateinfo-7/updateinfo.xml /security/repodata

vi /etc/yum.repos.d/bug-fix.repo
[security]
name=CentOS-$releasever - Security(local)
baseurl=file:///security
gpgcheck=0
enabled=1

yum clean all
yum makecache