* Act on CodeQL's actions/missing-workflow-permissions
https://codeql.github.com/codeql-query-help/actions/actions-missing-workflow-permissions/
* Be more specific in the matched regex
And don't match a group if we don't need to match one
* Make it slightly faster since we know what after -otp-
I create a const because both expressions are looking for
the same thing