diff --git a/bin/dry-run.rb b/bin/dry-run.rb
index ddd7a2313c..1ac98d22fc 100755
--- a/bin/dry-run.rb
+++ b/bin/dry-run.rb
@@ -679,11 +679,6 @@ def security_fix?(dependency)
     next
   end
 
-  if checker.up_to_date?
-    puts "    (no update needed as it's already up-to-date)"
-    next
-  end
-
   if checker.vulnerable?
     if checker.lowest_security_fix_version
       puts " => earliest available non-vulnerable version is " \
@@ -693,6 +688,11 @@ def security_fix?(dependency)
     end
   end
 
+  if checker.up_to_date?
+    puts "    (no update needed as it's already up-to-date)"
+    next
+  end
+
   latest_allowed_version = if checker.vulnerable?
                              checker.lowest_resolvable_security_fix_version
                            else