Adds the typos spell-checker to nuclei’s CI pipeline.
.github/workflows/typos.yml — runs typos on every push/PR to dev and main branches (pinned to v1.28.4 for supply chain security; follows existing workflow patterns with concurrency groups and bot filtering).typos.toml — configuration with false-positive exclusions for non-English READMEs, test fixtures, WAF regex data, vendor dir, and CLI flag identifiers that appear in help stringsFixed all 185 existing findings so the initial CI run passes cleanly:
| File | Fix |
|---|---|
internal/runner/runner.go |
ExludedDastTmplStats → ExcludedDastTmplStats |
internal/server/server.go |
PostReuestsHandlerRequest → PostRequestsHandlerRequest |
lib/config.go |
fiter → filter (comment) |
lib/tests/sdk_test.go |
seperate → separate (×3 comments) |
pkg/catalog/loader/loader.go |
ExludedDastTmplStats → ExcludedDastTmplStats |
pkg/fuzz/component/path.go |
splitted/Splitted → split/Split (×6) |
pkg/model/worflow_loader.go |
Renamed → workflow_loader.go |
pkg/templates/parser_stats.go |
ExludedDastTmplStats → ExcludedDastTmplStats |
pkg/templates/stats.go |
ExludedDastTmplStats → ExcludedDastTmplStats |
pkg/tmplexec/flow/flow_executor_test.go |
thant → that (comment) |
cmd/tmc/main.go |
formated/Formated → formatted/Formatted (×6) |
Before — typos finds 185 issues:
$ typos --format brief | wc -l
185
After — Clean run with zero findings:
$ typos --format brief --config .typos.toml
(no output, exit code 0)
crate-ci/typos)v1.28.4) for supply chain securityCloses #6532
/claim #6532
Bug Fixes
Chores
CharlesWong
@CharlesWong
cryptoaibot1738728800
@cryptoaibot1738728800
ProjectDiscovery
@projectdiscovery