diff --git a/.codespell_ignores b/.codespell_ignores
new file mode 100644
index 0000000..e69de29
diff --git a/.codespellrc b/.codespellrc
new file mode 100644
index 0000000..8f96f52
--- /dev/null
+++ b/.codespellrc
@@ -0,0 +1,8 @@
+[codespell]
+check-hidden = true
+# Note that `-w` doesn't work when ignore-multiline-regex is set
+# https://github.com/codespell-project/codespell/issues/3642
+ignore-multiline-regex = codespell:ignore-begin.*codespell:ignore-end
+ignore-words = .codespell_ignores
+# skip-file is not available https://github.com/codespell-project/codespell/pull/2759
+skip = .pandoc_template.html5,.README.html
diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml
new file mode 100644
index 0000000..8eadb61
--- /dev/null
+++ b/.github/workflows/codespell.yml
@@ -0,0 +1,17 @@
+# Codespell configuration is within .codespellrc
+---
+name: Codespell
+on:  # yamllint disable-line rule:truthy
+  - pull_request
+permissions:
+  contents: read
+jobs:
+  codespell:
+    name: Check for spelling errors
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Codespell
+        uses: codespell-project/actions-codespell@v2
diff --git a/.github/workflows/tft_citest_bad.yml b/.github/workflows/tft_citest_bad.yml
index 85db1f4..9f48f35 100644
--- a/.github/workflows/tft_citest_bad.yml
+++ b/.github/workflows/tft_citest_bad.yml
@@ -36,7 +36,7 @@ jobs:
           RUN_ID=$(gh api "repos/$REPO/actions/workflows/tft.yml/runs?event=issue_comment" \
             | jq -r "[.workflow_runs[] | select( .display_title == \"$PR_TITLE\" ) | select( .conclusion == \"failure\" ) | .id][0]")
           if [ "$RUN_ID" = "null" ]; then
-            echo "Failed workflow not found, exitting"
+            echo "Failed workflow not found, exiting"
             exit 1
           fi
           echo "Re-running workflow $RUN_ID"
diff --git a/README.md b/README.md
index 2e760d2..d919f76 100644
--- a/README.md
+++ b/README.md
@@ -1,6 +1,6 @@
 # ssh
 
-[![ansible-centos.yml](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-centos.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-centos.yml) [![ansible-debian.yml](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-debian.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-debian.yml) [![ansible-fedora.yml](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-fedora.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-fedora.yml) [![ansible-lint.yml](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-lint.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-lint.yml) [![ansible-test.yml](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-test.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-test.yml) [![ansible-ubuntu.yml](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-ubuntu.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-ubuntu.yml) [![markdownlint.yml](https://github.com/linux-system-roles/ssh/actions/workflows/markdownlint.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/markdownlint.yml) [![shellcheck.yml](https://github.com/linux-system-roles/ssh/actions/workflows/shellcheck.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/shellcheck.yml) [![tft.yml](https://github.com/linux-system-roles/ssh/actions/workflows/tft.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/tft.yml) [![tft_citest_bad.yml](https://github.com/linux-system-roles/ssh/actions/workflows/tft_citest_bad.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/tft_citest_bad.yml) [![woke.yml](https://github.com/linux-system-roles/ssh/actions/workflows/woke.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/woke.yml)
+[![ansible-centos.yml](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-centos.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-centos.yml) [![ansible-debian.yml](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-debian.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-debian.yml) [![ansible-fedora.yml](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-fedora.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-fedora.yml) [![ansible-lint.yml](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-lint.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-lint.yml) [![ansible-test.yml](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-test.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-test.yml) [![ansible-ubuntu.yml](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-ubuntu.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/ansible-ubuntu.yml) [![codespell.yml](https://github.com/linux-system-roles/ssh/actions/workflows/codespell.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/codespell.yml) [![markdownlint.yml](https://github.com/linux-system-roles/ssh/actions/workflows/markdownlint.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/markdownlint.yml) [![shellcheck.yml](https://github.com/linux-system-roles/ssh/actions/workflows/shellcheck.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/shellcheck.yml) [![tft.yml](https://github.com/linux-system-roles/ssh/actions/workflows/tft.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/tft.yml) [![tft_citest_bad.yml](https://github.com/linux-system-roles/ssh/actions/workflows/tft_citest_bad.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/tft_citest_bad.yml) [![woke.yml](https://github.com/linux-system-roles/ssh/actions/workflows/woke.yml/badge.svg)](https://github.com/linux-system-roles/ssh/actions/workflows/woke.yml)
 
 An Ansible role for managing ssh clients configuration.
 
diff --git a/defaults/main.yml b/defaults/main.yml
index 56dc756..65da6e6 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -13,7 +13,7 @@ ssh_drop_in_name: "{{ __ssh_drop_in_name }}"
 ssh: []
 
 # list of additional packages to install
-# for exmaple openssh-keycat or openssh-askpass
+# for example openssh-keycat or openssh-askpass
 ssh_additional_packages: []
 
 # the override values for the owner, group and mode of configuration file