Fix typos and add Codespell GitHub Actions

Author: kianmeng

.codespellignore

@@ -0,0 +1,4 @@
+deriver
+exampel
+failer
+spawnve

bin/lint

@@ -11,6 +11,7 @@ export LANG="${ENCODING:-en_US.UTF-8}"
 set -x
 
 # Actually run our tests.
+python -m codespell_lib -S "*.po,*.js,*.json,*.svg,*.scss" -I .codespellignore
 python -m flake8 .
 python -m black --check *.py warehouse/ tests/
 python -m isort --check *.py warehouse/ tests/

docs/development/malware-checks.rst

@@ -59,7 +59,7 @@ directory, and exported from ``__init__.py``. The checks in
 `tests/common/checks/`_ can serve as templates for developing new checks. Simply
 copy/paste the desired check template into `warehouse/malware/checks/`_ and edit
 the `dunder init file`_ to get started. Complex checks that consist of more than
-a signle file should be housed in a subdirectory of `warehouse/malware/checks/`_.
+a single file should be housed in a subdirectory of `warehouse/malware/checks/`_.
 
 All malware check classes should inherit from
 ``warehouse.malware.checks.base.MalwareCheckBase``, define a `scan` method, and
@@ -88,7 +88,7 @@ the following ``kwargs`` for ``"event_hook"`` checks:
 * ``file_url``: the file url when the ``hooked_object`` is a ``File``
 
 All verdicts **must** be associated with a particular object. For
-``"event_hook"`` checks, the ``obj_id`` should be propogated to verdicts
+``"event_hook"`` checks, the ``obj_id`` should be propagated to verdicts
 generated by that check. The `MalwareVerdict model`_ contains more information
 about required and optional verdict fields.
 

docs/development/token-scanning.rst

@@ -33,7 +33,7 @@ GitHub's Token scanning feature used to be called "Token Scanning" and is now
 "Secret Scanning". You may find the 2 names. GitHub scans public commits with
 the regex above (actually the limit to at least 130 characters long). For all
 tokens identified within a "push" event, they send us reports in bulk. The
-format is explained thouroughly in `their doc
+format is explained thoroughly in `their doc
 <https://docs.github.com/en/developers/overview/secret-scanning>`_ as well as
 in the `warehouse implementation ticket
 <https://github.com/pypa/warehouse/issues/6051>`_.

requirements/lint.in

@@ -23,3 +23,4 @@ types-requests
 types-setuptools
 types-sqlalchemy-utils
 types-stdlib-list
+codespell

requirements/lint.txt

@@ -51,6 +51,10 @@ click==8.1.3 \
     # via
     #   black
     #   curlylint
+codespell==2.1.0 \
+    --hash=sha256:19d3fe5644fef3425777e66f225a8c82d39059dcfe9edb3349a8a2cf48383ee5 \
+    --hash=sha256:b864c7d917316316ac24272ee992d7937c3519be4569209c5b60035ac5d569b5
+    # via -r requirements/lint.in
 curlylint==0.13.1 \
     --hash=sha256:008b9d160f3920404ac12efb05c0a39e209cb972f9aafd956b79c5f4e2162752 \
     --hash=sha256:9546ea82cdfc9292fd6fe49dca28587164bd315782a209c0a46e013d7f38d2fa

tests/frontend/setup.js

@@ -40,7 +40,7 @@ import "@babel/polyfill";
 // Monkeypatch the global fetch API
 fetch = require("jest-fetch-mock");  // eslint-disable-line no-global-assign
 
-// Make TextEncoder and cryto available in the global scope
+// Make TextEncoder and crypto available in the global scope
 // in the same way as in a browser environment
 window.TextEncoder = require("util").TextEncoder;
 const WebCrypto = require("node-webcrypto-ossl");

tests/unit/email/test_init.py

@@ -420,7 +420,7 @@ def test_send_admin_new_organization_requested_email(
         admin_user = pretend.stub(
             id="admin",
             username="admin",
-            name="PyPI Adminstrator",
+            name="PyPI Administrator",
             email="[email protected]",
             primary_email=pretend.stub(email="[email protected]", verified=True),
         )
@@ -524,7 +524,7 @@ def test_send_admin_new_organization_approved_email(
         admin_user = pretend.stub(
             id="admin",
             username="admin",
-            name="PyPI Adminstrator",
+            name="PyPI Administrator",
             email="[email protected]",
             primary_email=pretend.stub(email="[email protected]", verified=True),
         )
@@ -628,7 +628,7 @@ def test_send_admin_new_organization_declined_email(
         admin_user = pretend.stub(
             id="admin",
             username="admin",
-            name="PyPI Adminstrator",
+            name="PyPI Administrator",
             email="[email protected]",
             primary_email=pretend.stub(email="[email protected]", verified=True),
         )

tests/unit/integration/github/test_utils.py

@@ -52,7 +52,7 @@ def test_invalid_token_leak_request():
         ),
         (
             {"type": "failer", "token": "a", "url": "b"},
-            "Cannot extract token from recieved match",
+            "Cannot extract token from received match",
             "extraction",
         ),
     ],
@@ -594,7 +594,7 @@ def metrics_increment(key):
         origin="github",
     )
     assert metrics == {
-        "warehouse.token_leak.github.recieved": 1,
+        "warehouse.token_leak.github.received": 1,
         "warehouse.token_leak.github.processed": 1,
         "warehouse.token_leak.github.valid": 1,
     }
@@ -637,7 +637,7 @@ def metrics_increment(key):
         origin="github",
     )
     assert metrics == {
-        "warehouse.token_leak.github.recieved": 1,
+        "warehouse.token_leak.github.received": 1,
         "warehouse.token_leak.github.error.format": 1,
     }
 
@@ -667,7 +667,7 @@ def metrics_increment(key):
         origin="github",
     )
     assert metrics == {
-        "warehouse.token_leak.github.recieved": 1,
+        "warehouse.token_leak.github.received": 1,
         "warehouse.token_leak.github.error.invalid": 1,
     }
 

tests/unit/integration/vulnerabilities/osv/test_views.py

@@ -169,7 +169,7 @@ def find_service(self, *a, **k):
         assert response.status_int == 400
         assert metrics == {
             (
-                "warehouse.vulnerabilties.error.payload.json_error",
+                "warehouse.vulnerabilities.error.payload.json_error",
                 ("origin:osv",),
             ): 1,
         }