diff --git a/.github/linters/.codespellrc b/.github/linters/.codespellrc
new file mode 100644
index 00000000..5157d044
--- /dev/null
+++ b/.github/linters/.codespellrc
@@ -0,0 +1,2 @@
+[codespell]
+ignore-words-list = ans
diff --git a/.github/workflows/pattern-sh-ci.yml b/.github/workflows/pattern-sh-ci.yml
index 5ba26cf2..cc92a70b 100644
--- a/.github/workflows/pattern-sh-ci.yml
+++ b/.github/workflows/pattern-sh-ci.yml
@@ -25,7 +25,7 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/superlinter.yml b/.github/workflows/superlinter.yml
index b5e075bc..2003f448 100644
--- a/.github/workflows/superlinter.yml
+++ b/.github/workflows/superlinter.yml
@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           # Full git history is needed to get a proper list of changed files within `super-linter`
           fetch-depth: 0
@@ -24,7 +24,7 @@ jobs:
       # Run Linter against code base #
       ################################
       - name: Lint Code Base
-        uses: super-linter/super-linter/slim@2bdd90ed3262e023ac84bf8fe35dc480721fc1f2 # v8.2.1
+        uses: super-linter/super-linter/slim@9e863354e3ff62e0727d37183162c4a88873df41 # v8.6.0
         env:
           VALIDATE_ALL_CODEBASE: true
           DEFAULT_BRANCH: main
diff --git a/scripts/determine-main-clustergroup.sh b/scripts/determine-main-clustergroup.sh
index 6271dbad..b128f167 100755
--- a/scripts/determine-main-clustergroup.sh
+++ b/scripts/determine-main-clustergroup.sh
@@ -9,7 +9,7 @@ fi
 CGNAME=$(yq '.main.clusterGroupName' "$PATTERN_DIR/values-global.yaml")
 
 if [ -z "$CGNAME" ] || [ "$CGNAME" == "null" ]; then
-    echo "Error - cannot detrmine clusterGroupName"
+    echo "Error - cannot determine clusterGroupName"
     exit 1
 fi
 
diff --git a/scripts/manage-secret-app.sh b/scripts/manage-secret-app.sh
index 18a986e5..219b3cce 100755
--- a/scripts/manage-secret-app.sh
+++ b/scripts/manage-secret-app.sh
@@ -41,7 +41,7 @@ case "$STATE" in
     ;;
     "absent")
         common/scripts/manage-secret-namespace.sh "$NAMESPACE" "$STATE"
-        echo "Removing application wth chart location $CHART_LOCATION"
+        echo "Removing application with chart location $CHART_LOCATION"
         yq -i "del(.clusterGroup.applications[] | select(.chart == \"$CHART_NAME\"))" "$MAIN_CLUSTERGROUP_FILE"
     ;;
     *)