From dc4cd188a2590b1435aa24892088137dbf3c952d Mon Sep 17 00:00:00 2001
From: Raul Marquez <rmarquez@csa-iot.org>
Date: Thu, 20 Aug 2026 23:26:03 -0700
Subject: [PATCH 1/2] ci

---
 .flake8     | 1 +
 cspell.json | 7 ++++++-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/.flake8 b/.flake8
index ae0aa686..7eccea32 100644
--- a/.flake8
+++ b/.flake8
@@ -8,4 +8,5 @@ per-file-ignores =
     test_collections/manual_tests/**/*:E501,W291
     test_collections/app1_tests/**/*:E501
     test_collections/semi_automated_tests/**/*:E501
+    test_collections/matter/python_tests/**/*:E501
     alembic/versions/**/*:E128,W293,F401
diff --git a/cspell.json b/cspell.json
index a9b87b87..705eb437 100644
--- a/cspell.json
+++ b/cspell.json
@@ -117,7 +117,12 @@
         "PAVST",
         "WEBRTCR",
         "ZONEMGMT",
-        "APPDEVTYPEID"
+        "APPDEVTYPEID",
+        "astext",
+        "asname",
+        "TLSCERT",
+        "JFADMIN",
+        "AABBCCDD"
     ],
     "allowCompoundWords": true,
     "ignorePaths": [

From 3ce046654af23ecdb53aa93fb315e5ffe251e0dc Mon Sep 17 00:00:00 2001
From: Raul Marquez <rmarquez@csa-iot.org>
Date: Thu, 20 Aug 2026 23:32:20 -0700
Subject: [PATCH 2/2] ci

---
 .github/workflows/spell-check.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/spell-check.yml b/.github/workflows/spell-check.yml
index cfabc6bc..88eb4199 100644
--- a/.github/workflows/spell-check.yml
+++ b/.github/workflows/spell-check.yml
@@ -1,6 +1,9 @@
 name: "Check spelling"
 on: # rebuild any PRs and main branch changes
-  pull_request_target:
+  # pull_request (not pull_request_target) so the job checks out and scans the
+  # PR content; with pull_request_target the default checkout is the base
+  # branch, so PR runs were scanning main instead of the PR
+  pull_request:
     types: [opened, synchronize, reopened]
   push:
     branches: