diff --git a/ql/src/Security/CWE-829/UntrustedCheckoutCritical.ql b/ql/src/Security/CWE-829/UntrustedCheckoutCritical.ql
index b71b3cbba99..9f7f3fd8cee 100644
--- a/ql/src/Security/CWE-829/UntrustedCheckoutCritical.ql
+++ b/ql/src/Security/CWE-829/UntrustedCheckoutCritical.ql
@@ -1,6 +1,6 @@
 /**
  * @name Checkout of untrusted code in trusted context
- * @description Priveleged workflows have read/write access to the base repository and access to secrets.
+ * @description Privileged workflows have read/write access to the base repository and access to secrets.
  *              By explicitly checking out and running the build script from a fork the untrusted code is running in an environment
  *              that is able to push to the base repository and to access secrets.
  * @kind path-problem
diff --git a/ql/src/Security/CWE-829/UntrustedCheckoutHigh.ql b/ql/src/Security/CWE-829/UntrustedCheckoutHigh.ql
index 9faab24dbcb..980560dac9a 100644
--- a/ql/src/Security/CWE-829/UntrustedCheckoutHigh.ql
+++ b/ql/src/Security/CWE-829/UntrustedCheckoutHigh.ql
@@ -1,6 +1,6 @@
 /**
  * @name Checkout of untrusted code in trusted context
- * @description Priveleged workflows have read/write access to the base repository and access to secrets.
+ * @description Privileged workflows have read/write access to the base repository and access to secrets.
  *              By explicitly checking out and running the build script from a fork the untrusted code is running in an environment
  *              that is able to push to the base repository and to access secrets.
  * @kind problem
diff --git a/ql/src/Security/CWE-829/UntrustedCheckoutMedium.ql b/ql/src/Security/CWE-829/UntrustedCheckoutMedium.ql
index 574c2d7bffe..89d2e741306 100644
--- a/ql/src/Security/CWE-829/UntrustedCheckoutMedium.ql
+++ b/ql/src/Security/CWE-829/UntrustedCheckoutMedium.ql
@@ -1,6 +1,6 @@
 /**
  * @name Checkout of untrusted code in trusted context
- * @description Priveleged workflows have read/write access to the base repository and access to secrets.
+ * @description Privileged workflows have read/write access to the base repository and access to secrets.
  *              By explicitly checking out and running the build script from a fork the untrusted code is running in an environment
  *              that is able to push to the base repository and to access secrets.
  * @kind problem