How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
MicrosoftCopilot instructionsmicrosoft/DirectXMath/.github/copilot-instructions.md
/walbourn/directxmathtest/wiki). See [test copilot instructions](https://github.com/walbourn/directxmathtest/blob/main/.github/copilot-instructions.md) for additional information on the tests. - **Security**: This project uses secure coding practices from the Microsoft Secure Coding Guidelines, and is subject
No other project uses it yet
RelaticleCopilot instructionsRelaticle/relaticle/.github/copilot-instructions.md
highest-priority concern. A single cross-tenant data leak is a critical security incident. The app uses Filament panels with a per-request `TeamScope` global scope applied via middleware
Steady5 mentions in 2 weeks
1 project uses a version of this
UI5Copilot instructionsUI5/webcomponents/.github/copilot-instructions.md
unnecessary re-renders or heavy computations - ❌ **Type safety** - proper TypeScript usage and type definitions - ❌ **Security vulnerabilities** - XSS risks, unsafe DOM manipulation ## Test Coverage Requirements ### Required Tests - ✅ **Cypress tests
Steady6 mentions in 2 weeks
No other project uses it yet
MicrosoftCopilot instructionsmicrosoft/DirectXTK12/.github/copilot-instructions.md
/walbourn/directxtk12test/wiki). See [test copilot instructions](https://github.com/walbourn/directxtk12test/blob/main/.github/copilot-instructions.md) for additional information on the tests. - **Security**: This project uses secure coding practices from the Microsoft Secure Coding Guidelines, and is subject
tenstorrentCopilot instructionstenstorrent/tt-metal/.github/copilot-instructions.md
ttnn/api/ttnn/` - **Kernel Safety**: missing bounds check on L1 tile addressing; broken synchronization barrier order - **Security**: hardcoded credentials, secrets, or tokens anywhere in the diff ### 🟡 IMPORTANT (Requires discussion) - **Missing test coverage
ValkirieCopilot instructionsValkirie/HandheldCompanion/.github/copilot-instructions.md
lazy about: input validation at trust boundaries, error handling that prevents data loss, security, accessibility, the calibration real hardware needs (the platform is never the spec ideal, a clock drifts
dragonflyossCopilot instructionsdragonflyoss/nydus/.github/copilot-instructions.md
level caching with efficient eviction policies - Consider cache warming strategies for frequently accessed data ## Security Guidelines ### Data Integrity - Implement end-to-end digest validation - Support multiple hash algorithms (SHA256, Blake3
nohajcCopilot instructionsnohajc/anylinuxfs/.github/instructions/copilot-instructions.md
create_ctx`, `krun_start_enter`, etc.) | | `utils.rs` | Process management, PTY, signal handling, `ForkOutput`, `StatusError` | ## Security Model - **VM isolation**: Disk I/O is mediated inside the microVM. The host only sees
AvdLeeCopilot instructionsAvdLee/Swift-Concurrency-Agent-Skill/.github/copilot-instructions.md
instructions - Includes verification checklists where appropriate - Provides examples that demonstrate real-world usage 5. **Security Considerations** - Scripts should be reviewed for security implications - External dependencies should be clearly documented
bitxenoCopilot instructionsbitxeno/atvloadly/.github/copilot-instructions.md
avahi-daemon and usbmuxd status) - View installation logs: `/apps/:id/log` returns task log file ## Security Considerations - Apple ID passwords passed as command-line arguments to `plumesign`, ensure sensitive info
UbiquitousLearningCopilot instructionsUbiquitousLearning/mllm/.github/copilot-instructions.md
returns, and errors. - Suggest adding comments for complex algorithms or non-obvious logic. d. Security: - Identify potential security issues (e.g., buffer overflows, injection risks, insecure temporary files). - Recommend using secure
MongoDBCopilot instructionsmongodb/mongo-php-library/.github/copilot-instructions.md
requirement - Missing PHPDoc for complex types or generics - Inconsistent coding standards - Potential performance or security issues not mentioned in PR description - Breaking changes that weren't highlighted - Documentation that needs
No other project uses it yet
GZTimeWalkerCopilot instructionsGZTimeWalker/GZCTF/.github/copilot-instructions.md
environment variable flag injection. - Resource management: Automatic cleanup and scaling based on team participation. ## Security patterns - CSP: Backend injects nonces at runtime for script/style integrity (`%nonce%` placeholders in `index.html`). - Authentication
amdCopilot instructionsamd/gaia/.github/copilot-instructions.md
bury real bugs under style nits. - Keep review feedback high-signal and concise. ## Security and safety - Never expose secrets, tokens, or credentials. - If a public discussion appears to report
Steady6 mentions in 2 weeks
No other project uses it yet
pure-fishCopilot instructionspure-fish/pure/.github/instructions/copilot-instructions.md
confusing" - stay silent unless HIGH confidence it will cause problems ## Priority Areas (Review These) ### Security & Safety - Unsafe code blocks without justification - Command injection risks (shell commands, user input) - Path traversal
MicrosoftCopilot instructionsmicrosoft/hve-core/.github/copilot-instructions.md
Comprehensive coding guidelines and instructions for hve-core
wiresockCopilot instructionswiresock/proxifyre/.github/copilot-instructions.md
integrity host that starts `ProxiFyreUI.Managed.dll` - Enforces the app-local module allowlist, fixed CLR configuration, secure DLL search, and payload leases without Authenticode 7. **ProxiFyre.Tests** (`./ProxiFyre.Tests/`): - NUnit tests for shared configuration
jaegertracingCopilot instructionsjaegertracing/jaeger-ui/.github/copilot-instructions.md
diff: logic errors, incorrect conditions, missing error handling, concurrency hazards, resource leaks, security regressions, data corruption. These always warrant a comment. ## Code moves and test deletions Flag any pull request
Microsoft AzureReads credentialsCopilot instructionsAzure/data-api-builder/.github/copilot-instructions.md
Overview Data API builder (DAB) is an open-source, no-code tool that creates secure, full-featured REST, GraphQL endpoints for databases. It's a CRUD data API engine that
django-componentsCopilot instructionsdjango-components/django-components/.github/copilot-instructions.md
letter. - Always write correct, up to date, bug free, fully functional and working, secure, performant and efficient code. - Focus on readability over being performant. - Fully implement all required functionality. - Leave
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
