diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 6fe5892b487388ec1c0495cf245752d3ffff7e18..1cf5d490fa0d86db205eebf698fb2a7612ab454d 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -19,6 +19,7 @@ repos:
     rev: v2.1.0
     hooks:
       - id: codespell
+        exclude: diff
 
   - repo: https://github.com/Yelp/detect-secrets.git
     rev: v1.1.0
diff --git a/ldap-account-manager/README.md b/ldap-account-manager/README.md
index 292e4cec70781430ab2b8f318f630051ae5b6d56..dbc248040ef17cb6722438dd3c5c40ac8556e3a0 100644
--- a/ldap-account-manager/README.md
+++ b/ldap-account-manager/README.md
@@ -5,7 +5,7 @@
 ## Environment variables
 
 Name | Description | Default value
-\-\-\- | \-\-\- | \-\-\-
+--- | --- | ---
 `LAM_PASSWORD` | Password for administering LAM | `lam`
 `LDAP_URI` | URI of the LDAP service | `ldapi:///`
 `LDAP_ADMIN_DN` | DN of the admin account
diff --git a/ldap-account-manager/lam-setpass b/ldap-account-manager/lam-setpass
index 51df3cd6d814719b204ead947f75c4596b47da7a..4e482f41102ce08a973dd4a0e53d1051988178e8 100755
--- a/ldap-account-manager/lam-setpass
+++ b/ldap-account-manager/lam-setpass
@@ -12,4 +12,3 @@ $cfg->save();
 $conf = new LAMConfig("lam");
 $conf->set_Passwd($argv[1]);
 $conf->save();
-
diff --git a/nss-pam-ldapd/README.md b/nss-pam-ldapd/README.md
index de9bbe3180da35e30b50293ce0664785035a7e3c..d39bcbf1289c687504f9546ea53a2ab87849b39b 100644
--- a/nss-pam-ldapd/README.md
+++ b/nss-pam-ldapd/README.md
@@ -11,7 +11,7 @@ daemon. To use this container, execute a different process (like `su` or
 ## Environment variables
 
 Name | Default value
-\-\-\- | \-\-\-
+--- | ---
 `LDAP_URIS` | `ldapi:///`
 `LDAP_AUTH_TYPE` | `none`
 `LDAP_BINDDN`
diff --git a/slapd/README.md b/slapd/README.md
index 98c650ff3c0df67b0527a202f1c2d8ef652e5253..63795a838b7e3d8a3b8f6f5b9785946f6f22c57e 100644
--- a/slapd/README.md
+++ b/slapd/README.md
@@ -10,7 +10,7 @@ The container exposes TCP ports 389 (LDAP) and 636 (LDAPS) as well as the
 ## Environment variables
 
 Name | Description | Default value
-\-\-\- | \-\-\- | \-\-\-
+--- | --- | ---
 `LDAP_URLS` | List of URLs to serve. | `ldap:/// ldapi:/// ldaps:///`
 `LDAP_ROOTPASS` | Root password.
 `LDAP_DOMAIN` | Domain.
@@ -30,7 +30,7 @@ provided, those are used instead.
 ## Persistence
 
 The configuration (`cn=config`) and data LDAP directories reside in the
-`config` and `data` diretories respectively in the `/var/lib/ldap` volume.
+`config` and `data` directories respectively in the `/var/lib/ldap` volume.
 The LDAP directories are generated only if they're missing. Changes to
 environment variables afterwards won't change the configuration, since that is
 persisted to a volume. There's also the `/var/backups/ldap` volume where the
diff --git a/slapd/config.ldif b/slapd/config.ldif
index e10040d3d63236a2dac6ca9c78fb5a798c0382a3..48c1e738d69ce35ad5d3aa85e274c50c83e4dc53 100644
--- a/slapd/config.ldif
+++ b/slapd/config.ldif
@@ -109,4 +109,3 @@ olcAccess: to attrs=shadowLastChange
 # everyone else can read everything.
 olcAccess: to *
   by * read
-
diff --git a/slapd/entrypoint b/slapd/entrypoint
index 95c232baad556d2f6c01e26e65af00cbaabda5a6..9a0d41f9800467a7a216799aec25fe1741a9afef 100755
--- a/slapd/entrypoint
+++ b/slapd/entrypoint
@@ -7,7 +7,7 @@ unset LDAP_ROOTPASS
 export PASSWORD_HASH
 
 # See https://github.com/moby/moby/issues/8231
-# shellcheck disable=SC2039
+# shellcheck disable=SC3045
 ulimit -n 1024 || true
 
 # Base DN.