diff --git a/.github/actions/spelling/expect.txt b/.github/actions/spelling/expect.txt
index b25d584152..e3a03de799 100644
--- a/.github/actions/spelling/expect.txt
+++ b/.github/actions/spelling/expect.txt
@@ -1,20 +1,13 @@
-Acked
-activitylog
 aks
-asns
 Auths
 autoaccept
 autoscaler
-awsconf
-awsp
 backupconfiguration
 bigquery
-BLOCKLIST
 cavium
 cdn
 certificatechains
 cmek
-cosmosdb
 cryptokey
 customresources
 datapath
@@ -30,19 +23,19 @@ hostkeys
 iap
 iex
 ilb
-iotedge
 ingresstls
+iotedge
+linux
 loggingservice
 managedzone
 mcr
 messagestoragepolicy
 mfs
+mgroup
 Mpim
 nodepool
-oci
-opc
+nullgroup
 opcplc
-opcua
 Pids
 postgre
 pushconfig
@@ -51,21 +44,16 @@ resourcegroup
 Sas
 serviceprincipals
 Snat
+spdx
 sph
 spo
 sqlserver
 sshkeys
+testutils
 toplevel
 tpu
 uint
-vcn
-vcns
 vdcs
-vmknics
 Vtpm
 vulnerabilityassessmentsettings
 wil
-mgroup
-muser
-testutils
-nullgroup
diff --git a/.github/actions/spelling/line_forbidden.patterns b/.github/actions/spelling/line_forbidden.patterns
index 2686ef0998..d52a2b673d 100644
--- a/.github/actions/spelling/line_forbidden.patterns
+++ b/.github/actions/spelling/line_forbidden.patterns
@@ -1,4 +1,4 @@
-# Detect common combinations of valid words that are in fact invalid. 
+# Detect common combinations of valid words that are in fact invalid.
 # Useful for brand capitalizations
 
 #
@@ -9,6 +9,10 @@
 \sthe Mondoo Platform\b
 \sMondoo platform\b
 
+# s.b. Compliance Hub
+\scompliance hub\b
+\sCompliance hubplatform\b
+
 #
 # Industry Terms
 #
@@ -98,6 +102,7 @@
 
 # s.b. Red Hat
 \bRedHat\b
+\bRedhat\b
 
 # s.b. AlmaLinux
 \bAlma Linux\b
diff --git a/.github/actions/spelling/reject.txt b/.github/actions/spelling/reject.txt
index 1653f287cb..122f5ad6be 100644
--- a/.github/actions/spelling/reject.txt
+++ b/.github/actions/spelling/reject.txt
@@ -10,4 +10,3 @@ Sorce
 ^untilling$
 ^wether.*
 \w*(?<!right-)click
-press
diff --git a/.github/workflows/spell-check.yaml b/.github/workflows/spell-check.yaml
index 22c77fc648..13c1d12774 100644
--- a/.github/workflows/spell-check.yaml
+++ b/.github/workflows/spell-check.yaml
@@ -23,12 +23,12 @@ jobs:
     steps:
       - name: check-spelling
         id: spelling
-        uses: check-spelling/check-spelling@v0.0.21
+        uses: check-spelling/check-spelling@v0.0.22
         with:
           suppress_push_for_open_pull_request: 1
           checkout: true
           post_comment: 0
-          dictionary_source_prefixes: '{"mondoo": "https://raw.githubusercontent.com/mondoohq/spellcheck-dictionary/main/", "cspell": "https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/"}'
+          dictionary_source_prefixes: '{"mondoo": "https://raw.githubusercontent.com/mondoohq/spellcheck-dictionary/main/", "cspell": "https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20230509/dictionaries/"}'
           extra_dictionaries:
             cspell:aws/aws.txt
             cspell:filetypes/filetypes.txt
@@ -47,7 +47,7 @@ jobs:
     if: (success() || failure()) && needs.spelling.outputs.followup
     steps:
       - name: comment
-        uses: check-spelling/check-spelling@v0.0.21
+        uses: check-spelling/check-spelling@v0.0.22
         with:
           checkout: true
           task: ${{ needs.spelling.outputs.followup }}
diff --git a/examples/complex.mql.yaml b/examples/complex.mql.yaml
index 13188ed539..1253c77790 100644
--- a/examples/complex.mql.yaml
+++ b/examples/complex.mql.yaml
@@ -9,7 +9,7 @@ packs:
   - asset.family.contains("unix")
 
   # Queries can be grouped together, which gives us additional filters on each group.
-  # For example: the first group is for MacOS only, the second for is for Linux
+  # For example: the first group is for macOS only, the second for is for Linux
   groups:
     - filters: asset.platform == "macos"
       queries:
diff --git a/providers-sdk/v1/vault/keyring/keyring.go b/providers-sdk/v1/vault/keyring/keyring.go
index 253a6b8562..fe114f87a2 100644
--- a/providers-sdk/v1/vault/keyring/keyring.go
+++ b/providers-sdk/v1/vault/keyring/keyring.go
@@ -26,7 +26,7 @@ func New(serviceName string) *Vault {
 		allowedBackends: []keyring.BackendType{
 			// Windows
 			keyring.WinCredBackend,
-			// MacOS
+			// macOS
 			keyring.KeychainBackend,
 			// Linux
 			keyring.SecretServiceBackend,
diff --git a/providers/os/README.md b/providers/os/README.md
index 1edaa3ce34..afa03a2ef5 100644
--- a/providers/os/README.md
+++ b/providers/os/README.md
@@ -1,6 +1,5 @@
 ## os provider for cnquery/cnspec
 
-This provides makes the operating system accessible, including Linux, MacOS, Windows and many more.
+This provides makes the operating system accessible, including Linux, macOS, Windows and many more.
 
 It provides connectors for Local OS, SSH, WinRM, and Docker.
-
diff --git a/providers/os/connection/fs/README.md b/providers/os/connection/fs/README.md
index 0ec3713e7e..1e3a27dd14 100644
--- a/providers/os/connection/fs/README.md
+++ b/providers/os/connection/fs/README.md
@@ -4,7 +4,7 @@ This transport reads a directory and treats it as its own platform. This is usef
 
 ## Testing
 
-If you need to test a remote linux system on macos, it is possible to spin up the machine and mount the whole filesystem to your local machine.
+If you need to test a remote Linux system on macOS, it is possible to spin up the machine and mount the whole filesystem to your local machine.
 
 ```bash
 # NOTE: make sure you do NOT run the following as sudo
@@ -34,6 +34,7 @@ On debian, the needed package is called `sshfs`.
 When you want to connect to a Vagrant VM, you need to add an ssh key to the root user.
 
 Then you can use root, to mount via sshfs:
+
 ```bash
 sshfs -o default_permissions root@127.0.0.1:/ ./mnt -o IdentityFile=/home/you/.ssh/id_rsa -o Port=2222
-```
\ No newline at end of file
+```
diff --git a/providers/os/resources/services/launchd.go b/providers/os/resources/services/launchd.go
index 3cdc0dbe4c..cc586d6823 100644
--- a/providers/os/resources/services/launchd.go
+++ b/providers/os/resources/services/launchd.go
@@ -36,7 +36,7 @@ func ParseServiceLaunchD(input io.Reader) ([]*Service, error) {
 	return services, nil
 }
 
-// MacOS is using launchd as default service manager
+// macOS is using launchd as default service manager
 type LaunchDServiceManager struct {
 	conn shared.Connection
 }