App listing submission problem on Shopify

I tried to submit the app on shopify for approval. But everytime they give me below message

Your primary app listing has 2 issues to fix before you can submit your app for review

App must set security headers to protect against clickjacking.
App must verify the authenticity of the request from Shopify.

Here is my code for verifing hmac and its working correctly.

$calculated_hmac = hash_hmac('sha256', $data, Auth::$client_secret);
$result = hash_equals($hmac, $calculated_hmac);

Here is header I hook on wordpress

add_action('send_headers', [$this, 'send_headers']);

public function send_headers() {
    header("Content-Security-Policy: frame-ancestors 'none';");
    header('X-Frame-Options: SAMEORIGIN');
}

But after submitting I am still getting same message.