Update repository.md

docs/repository.md

@@ -41,7 +41,7 @@ approval is granted, GDI projects MUST NOT cut a GA release.
 - MUST use [GitHub secrets](https://docs.github.com/en/actions/reference/encrypted-secrets) to store sensitive data (auth tokens, passwords) and limit their usage to only required places
 - MUST NOT use [Personal Access Tokens](https://docs.github.com/en/github/authenticating-to-github/creating-a-personal-access-token) in GitHub Actions
 - MUST [limit permissions of `GITHUB_TOKEN`](https://docs.github.com/en/actions/reference/authentication-in-a-workflow#permissions-for-the-github_token) when used
-  - MUST only set the absolutely required permissions (least privilege)
+  - MUST only set the absolutely required `permissions` (least privilege)
   - MUST set `permissions` for individual `jobs`
 
 ### GitHub Applications