diff --git a/.github/linters/.codespellrc b/.github/linters/.codespellrc
new file mode 100644
index 0000000..aa362fd
--- /dev/null
+++ b/.github/linters/.codespellrc
@@ -0,0 +1,4 @@
+# https://github.com/super-linter/super-linter/blob/main/TEMPLATES/.codespellrc
+[codespell]
+check-hidden =
+skip = */package-lock.json,*/go.mod,*/go.sum,*.log,.git,share/man
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 8cc822b..41a944c 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -45,6 +45,7 @@ jobs:
           ref: ${{ job.workflow_sha }}
           path: .github/workflows/${{ job.workflow_repository }}
           persist-credentials: false
+      - run: pwd && ls -al ${{ github.workspace }}/.github/workflows/${{ job.workflow_repository }}/.github/linters/.codespellrc
       - uses: super-linter/super-linter/slim@4ce20838b8ab83717e78138c5b3a1407148e0918 # v8.7.0
         env:
           GITHUB_TOKEN: ${{ github.token }}
@@ -55,7 +56,7 @@ jobs:
           VALIDATE_GIT_COMMITLINT: false # commitlint is bad
           VALIDATE_GITHUB_ACTIONS_ZIZMOR: false
           VALIDATE_JSCPD: false # too prone to false-positives
-          VALIDATE_SPELL_CODESPELL: false # TODO
+          SPELL_CODESPELL_CONFIG_FILE: ${{ github.workspace }}/.github/workflows/${{ job.workflow_repository }}/.github/linters/.codespellrc
 
   dependency-review:
     if: startsWith('pull_request', github.event_name)