PR
ci: integrate typos spell checker into CI
projectdiscovery/nuclei#6830

Proposed Changes

Integrates the typos spell checker into the CI pipeline to automatically catch typos in future PRs.

/claim #6532

Changes

  • .github/workflows/typos.yaml: GitHub Actions workflow that runs on push to dev, pull requests, and manual dispatch
  • _typos.toml: Configuration file with baseline exceptions for existing typos and false positives

Configuration Highlights

The typos config excludes:

  • Non-English README files (README_*.md)
  • Changelog (doc/CHANGELOG.md)
  • Test data and JSON files
  • CLI flag abbreviations (ot, ue, hae, etc.)
  • External library types (AllowdTypes from goflags)
  • Existing typos tracked for follow-up fixes

Proof

$ typos --format brief
# No output - all checks pass
$ echo $?
0

The workflow matches the existing CI patterns (concurrency groups, bot actor exclusion, actions/checkout@v6).

Checklist

  • PR created against dev branch
  • Tests pass locally (typos check returns 0)
  • Configuration allows CI to pass on current codebase
  • Documentation: config file is self-documenting with comments

Note

Existing typos in the codebase are baselined in the config to avoid blocking this integration. These can be addressed in follow-up PRs:

  • ExludedExcluded (constant rename)
  • seperateseparate
  • formatedformatted
  • etc.

Summary by CodeRabbit

  • Chores
    • Updated spell-check configuration to add curated typo-to-correct mappings for domain-specific terms and test placeholders, extend identifier handling for acronyms and formats, and introduce targeted file-pattern exclusions to reduce false positives and improve validation accuracy.

Claim

Total prize pool $125
Total paid $0
Status Pending
Submitted February 05, 2026
Last updated February 05, 2026

Contributors

CR

cryptoaibot1738728800

@cryptoaibot1738728800

100%

Sponsors

CR

cryptoaibot1738728800

@cryptoaibot1738728800

$100
PR

ProjectDiscovery

@projectdiscovery

$25