I figured it out:
In the settings of SSBA select “Styling”. If you set “Image Set” to custom you can link to your custom icons for each button by pressing the “upload” button. It will display the URL of the custom icon.
In URL of every custom button I deleted “http:” so the URL starts with “//…”.
This got rid of the security alerts.
