diff --git a/.codespell_ignores b/.codespell_ignores
new file mode 100644
index 0000000..e69de29
diff --git a/.codespellrc b/.codespellrc
new file mode 100644
index 0000000..2bf9755
--- /dev/null
+++ b/.codespellrc
@@ -0,0 +1,8 @@
+[codespell]
+check-hidden = true
+# Note that `-w` doesn't work when ignore-multiline-regex is set
+# https://github.com/codespell-project/codespell/issues/3642
+ignore-multiline-regex = codespell:ignore-begin.*codespell:ignore-end
+ignore-words = .codespell_ignores
+# skip-file is not available https://github.com/codespell-project/codespell/pull/2759
+skip = .README.html
diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml
new file mode 100644
index 0000000..8eadb61
--- /dev/null
+++ b/.github/workflows/codespell.yml
@@ -0,0 +1,17 @@
+# Codespell configuration is within .codespellrc
+---
+name: Codespell
+on:  # yamllint disable-line rule:truthy
+  - pull_request
+permissions:
+  contents: read
+jobs:
+  codespell:
+    name: Check for spelling errors
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Codespell
+        uses: codespell-project/actions-codespell@v2
diff --git a/README.md b/README.md
index 43f9df5..398063e 100644
--- a/README.md
+++ b/README.md
@@ -1,6 +1,6 @@
 # Direct AD Integration role
 
-[![ansible-lint.yml](https://github.com/linux-system-roles/ad_integration/actions/workflows/ansible-lint.yml/badge.svg)](https://github.com/linux-system-roles/ad_integration/actions/workflows/ansible-lint.yml) [![ansible-test.yml](https://github.com/linux-system-roles/ad_integration/actions/workflows/ansible-test.yml/badge.svg)](https://github.com/linux-system-roles/ad_integration/actions/workflows/ansible-test.yml) [![markdownlint.yml](https://github.com/linux-system-roles/ad_integration/actions/workflows/markdownlint.yml/badge.svg)](https://github.com/linux-system-roles/ad_integration/actions/workflows/markdownlint.yml) [![tft.yml](https://github.com/linux-system-roles/ad_integration/actions/workflows/tft.yml/badge.svg)](https://github.com/linux-system-roles/ad_integration/actions/workflows/tft.yml) [![tft_citest_bad.yml](https://github.com/linux-system-roles/ad_integration/actions/workflows/tft_citest_bad.yml/badge.svg)](https://github.com/linux-system-roles/ad_integration/actions/workflows/tft_citest_bad.yml) [![woke.yml](https://github.com/linux-system-roles/ad_integration/actions/workflows/woke.yml/badge.svg)](https://github.com/linux-system-roles/ad_integration/actions/workflows/woke.yml)
+[![ansible-lint.yml](https://github.com/linux-system-roles/ad_integration/actions/workflows/ansible-lint.yml/badge.svg)](https://github.com/linux-system-roles/ad_integration/actions/workflows/ansible-lint.yml) [![ansible-test.yml](https://github.com/linux-system-roles/ad_integration/actions/workflows/ansible-test.yml/badge.svg)](https://github.com/linux-system-roles/ad_integration/actions/workflows/ansible-test.yml) [![codespell.yml](https://github.com/linux-system-roles/ad_integration/actions/workflows/codespell.yml/badge.svg)](https://github.com/linux-system-roles/ad_integration/actions/workflows/codespell.yml) [![markdownlint.yml](https://github.com/linux-system-roles/ad_integration/actions/workflows/markdownlint.yml/badge.svg)](https://github.com/linux-system-roles/ad_integration/actions/workflows/markdownlint.yml) [![tft.yml](https://github.com/linux-system-roles/ad_integration/actions/workflows/tft.yml/badge.svg)](https://github.com/linux-system-roles/ad_integration/actions/workflows/tft.yml) [![tft_citest_bad.yml](https://github.com/linux-system-roles/ad_integration/actions/workflows/tft_citest_bad.yml/badge.svg)](https://github.com/linux-system-roles/ad_integration/actions/workflows/tft_citest_bad.yml) [![woke.yml](https://github.com/linux-system-roles/ad_integration/actions/workflows/woke.yml/badge.svg)](https://github.com/linux-system-roles/ad_integration/actions/workflows/woke.yml)
 
 An ansible role which configures direct Active Directory integration.