This repository contains GitHub composite actions. Top-level directories are action namespaces; each action declares its interface in action.yml and documents usage in its README. Keep this file focused on cross-repository guidance and below 4,000 characters. Review policies and path-specific guidance live in .github/instructions/*.instructions.md; follow the instruction files matched to the changed paths. Assist with defensive security work only. Validate untrusted inputs, use least-privilege access, and never expose or commit secrets.
This file provides guidelines for GitHub Copilot and other AI assistants when helping with this repository. All tools must output data in JSON format with standardized fields for consistency and interoperability. Every parser tool must use this exact structure for all output records: Every tool output must include these four required fields: All parser-specific data must be contained within the message field as a JSON object. This provides: - Consistent top-level structure across all parsers - Clear separation between metadata…
617mo agoReviewMountCreate a free account to mount
Versioning is dynamic via setuptools-scm from git tags. This is a keyring backend plugin (~435 lines) that authenticates pip/twine against Azure DevOps Artifacts feeds using pure Python — no .NET, no MSAL. Authentication flow (_backend.py → _provider.py → _session_token.py): Provider chain (_provider.py): - Providers implement the TokenProvider Protocol (structural subtyping — no base class inheritance) - run_chain() tries each provider in order, catches all exceptions, and returns the first successful token - Default chain: ["azure_cli", "azure_identity"] — overridable via ARTIFACTS_KEYRING_NOFUSS_PROVIDER…
This repository provides evaluation tools for Azure VoiceLive (Speech-to-Speech-to-Text) voice agents. It combines VoiceLive API testing with Azure AI Foundry evaluators to assess voice assistant performance. Key Principle: All Azure…
Add a comment at the end of every file you create or modify: Contains AI-generated edits. - Python files: # Contains AI-generated edits. - SQL files: -- Contains AI-generated edits. - Markdown / YAML / CSV: <!-- Contains AI-generated edits. --> - Notebooks (.ipynb): add a markdown cell at the end with > Contains AI-generated edits. This workspace implements the DQ-Coworker — an intelligent Data Quality framework for enterprise data platforms. All code, notebooks, and metadata produced here must align…
Trust these instructions first. Only search the repo if information here is incomplete or found to be incorrect. Kompli is a Linux security compliance engine derived from Azure OSConfig. The repository keeps the ComplianceEngine module and the direct dependencies needed to build, test, package, and fuzz that module. The code is written in C11/C++11, uses CMake and vcpkg, and targets Linux only. Build outputs include build/adapters/mc/complianceengine/libOsConfigResourceComplianceEngine.so and build/modules/bin/complianceengine.so. Tests are registered from the retained common libraries and src/modules/complianceengine/tests/. Some tests…
These instructions guide AI coding agents (and the developers driving them) when working on this codebase. They are not the end-user KQL assistant prompt — that lives in src/Client/instructions.md and is shipped to users at runtime. Keep the two separate. For the full "why" behind everything below, read ARCHITECTURE.md. When a change contradicts these rules, prefer the architecture doc and update both. A VS Code extension that mimics the desktop Kusto Explorer app: edit multi-query .kql files, run queries, and…
Nacelle is an experimental Tokio-based Rust library for streaming services across TCP, Unix sockets, HTTP/1, and TLS-enabled listeners. Keep changes small, validated, and consistent with the existing crate boundaries.
Whenever making any Azure MCP server calls, you should always use the subscription ID of 5669097f-9a99-4354-b528-addefc61d776 and tenant ID of 16b3c013-d300-468d-ac64-7eda0820b6d3. Always assume Azure AD credentials when trying to connect to Azure services via MCP.
614mo agoReviewMountCreate a free account to mount
Always use Subscription 5669097f-9a99-4354-b528-addefc61d776 and Tenant 16b3c013-d300-468d-ac64-7eda0820b6d3. Always assume Azure AD credentials when trying to connect to Azure services via MCP.
614mo agoReviewMountCreate a free account to mount
python-lsp-compare is a benchmark and regression harness for Python LSP servers. It downloads servers, runs LSP scenarios over stdio JSON-RPC, captures timing/payload metrics, and produces comparison reports. Pure Python, zero external dependencies. All source lives under src/python_lsp_compare/. Key modules and data flow: - **server_download.py** — Downloads servers from GitHub releases (ServerSpec) or installs into isolated venvs from PyPI (PypiServerSpec). Caches binaries under .python-lsp-compare/servers/. Version checks cached 24h in versions.json. Functions return tuple[Path, str] (executable path + version label). - **server_configs.py**…
Project: listent - macOS entitlement scanning CLI tool Language: Rust Last Updated: September 20, 2025 listent is a fast command-line tool for macOS that scans and monitors code signing entitlements. It provides both one-time scanning and real-time monitoring capabilities for security analysis and compliance verification. Now includes background daemon mode for continuous system monitoring. Usage: listent monitor [OPTIONS] [PATH...]
This repo builds notation-azure-artifactsigning, a Notation plugin (a single-file native executable) that signs OCI artifacts using Microsoft's Artifact Signing service. Notation invokes the binary as a subprocess, sends a JSON request on stdin, and expects a JSON response on stdout (or a JSON ErrorResponse on stderr with a non-zero exit code). Implements the Notation plugin contract. Three commands are dispatched from Program.ProcessCommand: Capability advertised: SIGNATURE_GENERATOR.RAW. Only RSA-3072 / SHA-384 / RSASSA-PSS-SHA-384 are supported (see Constants/PluginConstants.cs); validators reject anything else. Targets…
c-util is a Microsoft Azure C utility library providing fundamental data structures and asynchronous operation primitives. This is a C99/C11 library with extensive macro-based code generation patterns for type-safe generic programming.
Instructions for every Copilot session in this repository. Phase 4 adds a "Definition of Done" section. The hook in .github/hooks/tdd-guard.json blocks changes to these files:
This file is the root of the agent governance framework. Each agent also has its own governance file. These instructions and guardrails are absolute. Never bypass or override them. Do not do more than the task needs. Note: - ASD-STE100+ = strict ASD-STE100 + technical names, technical verbs and domain words. - Plain Language is as defined by https://plainlanguage.gov/ - Chicago Manual of Style is as defined by https://www.chicagomanualofstyle.org/home.html 0. General principles: - Select the English style for the reader:…
ElasticCopilot instructions
