diff --git a/assets/queries/cloudFormation/aws/routertable_with_default_routing/query.rego b/assets/queries/cloudFormation/aws/routertable_with_default_routing/query.rego
index 8bc2f0f1875..918e81c8cad 100644
--- a/assets/queries/cloudFormation/aws/routertable_with_default_routing/query.rego
+++ b/assets/queries/cloudFormation/aws/routertable_with_default_routing/query.rego
@@ -47,7 +47,7 @@ CxPolicy[result] {
 }
 
 CxPolicy[result] {
-	some doc in input.document
+	some docs in input.document
 	[path, Resources] := walk(docs)
 
 	resource := Resources[key]
@@ -57,7 +57,7 @@ CxPolicy[result] {
 	not common_lib.valid_key(properties, "NatGatewayId")
 
 	result := {
-		"documentId": doc.id,
+		"documentId": docs.id,
 		"resourceType": resource.Type,
 		"resourceName": cf_lib.get_resource_name(resource, key),
 		"searchKey": sprintf("%s%s.Properties", [cf_lib.getPath(path), key]),
diff --git a/assets/queries/k8s/pod_misconfigured_network_policy/query.rego b/assets/queries/k8s/pod_misconfigured_network_policy/query.rego
index b9234df0b60..d7ed1c5e3a9 100644
--- a/assets/queries/k8s/pod_misconfigured_network_policy/query.rego
+++ b/assets/queries/k8s/pod_misconfigured_network_policy/query.rego
@@ -34,7 +34,7 @@ CxPolicy[result] {
 
 # if it's not the same namespace pod must be matched explicitly
 CxPolicy[result] {
-	some doc in input.document
+	some pod in input.document
 	pod.kind == "Pod"
 
 	policyList := [policy | policy := input.document[j]; policy.kind == "NetworkPolicy"]