Copilot instructions examples

OWASPCopilot instructions

wrongsecrets

OWASP/wrongsecrets/.github/copilot-instructions.md

intentionally vulnerable code** for educational purposes. When contributing, maintain this educational intent while following secure coding practices in the framework itself. ## Repository Structure ``` wrongsecrets/ ├── src/main/java/org/owasp/wrongsecrets/ │ ├── challenges/ # Challenge implementations │ │ ├── docker/ # Docker

No other project uses it yet

apacheCopilot instructions

iceberg-rust

apache/iceberg-rust/.github/copilot-instructions.md

praising the code unless it's exceptional. - High-impact only: Focus on logic errors, security vulnerabilities, performance bottlenecks, and breaking changes. - Skip the Obvious: Do not describe what the code

No other project uses it yet

Gu1llaum-3Copilot instructions

sshm

Gu1llaum-3/sshm/.github/copilot-instructions.md

Centralized keymap + help. * Single source of truth for styles. * Small submodels and composition. --- ## 13) Security & Reliability * Validate all external inputs; sanitize strings rendered into the terminal. * Respect user locale

bitfoundationCopilot instructions

bitplatform

bitfoundation/bitplatform/.github/copilot-instructions.md

Implement Structured Logging**: Use structured logging for clear, queryable application logs. 6. **Adhere to Security Best Practices**: Implement robust authentication and authorization patterns. 7. **Use Async Programming**: Employ `async/await

trueforge-orgCopilot instructions

truecharts

trueforge-org/truecharts/.github/copilot-instructions.md

values schema (`charts/library/common/values.schema.json`). - No default passwords; user data must be stored on persistent volumes. - Security: - Never commit secrets, tokens, private keys or real credentials. - Give credentials to containers with `secretKeyRef

mozillaCopilot instructions

bedrock

mozilla/bedrock/.github/copilot-instructions.md

around I/O, network calls, and external services) * Race conditions, concurrency issues, or state inconsistencies * Security concerns (e.g., injection risks, unsafe deserialization, secrets handling). Heavily flag changes that add risks

Capsize-GamesCopilot instructions

airunner

Capsize-Games/airunner/.github/copilot-instructions.md

check passed. - Avoid broad formatting or refactoring work when a focused fix is sufficient. ## Security and data handling - Keep prompts, generated content, transcriptions, credentials, and raw API payloads

ipa-labReads credentialsCopilot instructions

hackingBuddyGPT

ipa-lab/hackingBuddyGPT/.github/copilot-instructions.md

Instructions for hackingBuddyGPT ## Project Summary hackingBuddyGPT is a research-driven Python framework that helps security researchers and penetration testers use Large Language Models (LLMs) to automate and experiment with security

AHEKOTCopilot instructions

ComfyUI_VNCCS_Utils

AHEKOT/ComfyUI_VNCCS_Utils/.github/copilot-instructions.md

there by design, but do not make a currently passing file depend on torch. ## Security rules `scripts/security_scan.py` scans all `.py/.js/.mjs/.json/.toml` (tests included) and CI fails on any finding. It forbids

lichtblick-suiteCopilot instructions

lichtblick

lichtblick-suite/lichtblick/.github/copilot-instructions.md

surrounding code - **No breaking changes**: Preserve existing APIs and interfaces unless explicitly asked - **Security first**: Never hardcode secrets, credentials, or sensitive data - **Open-source**: All contributions must be compliant with

afreakyelfCopilot instructions

Pdf-Viewer

afreakyelf/Pdf-Viewer/.github/copilot-instructions.md

where applicable. - Respect system font scaling; test at 1.3×/2.0×. - Announce loading/progress/accessibility events appropriately. --- ## Security & File/URI Handling - Support `FLAG_SECURE` opt-in; don’t bypass if set. - Handle

chernistryCopilot instructions

bernstein

chernistry/bernstein/.github/copilot-instructions.md

spawning, identity, signals tasks/ # Lifecycle, store, claim, retry, models quality/ # Gates, testing, review, architecture security/ # Auth, RBAC, permissions, compliance observability/ # Metrics, tracing, logging, alerting protocols/ # MCP, A2A, ACP, gRPC, cluster

integrationsCopilot instructions

terraform-provider-github

integrations/terraform-provider-github/.github/copilot-instructions.md

HIGH and MEDIUM findings - Report `HIGH`: correctness bugs, regressions, breaking schema/state changes without migration, security issues, secret leakage, panics, data loss risks. - Report `MEDIUM`: missing test coverage for changed behavior

No other project uses it yet

KieirraCopilot instructions

murmure

Kieirra/murmure/.github/copilot-instructions.md

supports 25 European languages. ### Objective - Ensure strict compliance with the development principles (privacy, security, simplicity, clean code) and technical rules outlined in the [GUIDELINES.md](https://github.com/Kieirra/murmure/blob/main/GUIDELINES.md) and [CONTRIBUTING.md

layer5ioPipes a download into a shellCopilot instructions

layer5

layer5io/layer5/.github/copilot-instructions.md

issues - Check `eslint.config.js` for rule details - Common fixes: indentation (2 spaces), double quotes, semicolons ## Security Best Practices - Never commit secrets, API keys, or credentials - Use environment variables for sensitive configuration

No other project uses it yet

vndeeCopilot instructions

llm-sandbox

vndee/llm-sandbox/.github/copilot-instructions.md

Language Model (LLM) generated code in a safe and isolated mode. The project provides secure execution environments for AI-generated code with: - **Multi-language support**: Python, JavaScript/Node.js, Java

No other project uses it yet

community-shadersCopilot instructions

skyrim-community-shaders

community-shaders/skyrim-community-shaders/.github/copilot-instructions.md

suggest `REL::RelocateMember()` patterns - **Buffer Conflicts**: Highlight GPU register conflicts, recommend hlslkit buffer scanning - **Security Risks**: Validate user input, prevent DirectX crashes from malformed configurations ### Code Quality Standards - **Complete Solutions

cdxgenCopilot instructions

cdxgen

cdxgen/cdxgen/.github/copilot-instructions.md

spawn", { command: cmd, cwd: dir }); // structured trace if (DEBUG_MODE) console.log("verbose detail", detail); ``` ### Security / secure mode ```js import { isSecureMode } from "../helpers/utils.js"; if (isSecureMode) return; // skip operations unsafe under --permission

stardustaiCopilot instructions

dataset-viewer

stardustai/dataset-viewer/.github/copilot-instructions.md

Handle millions of lines efficiently - **Real-time Search**: Regex search with highlighting - **Connection Management**: Secure credential storage with unified interface ## Storage Architecture - **BaseStorageClient**: Abstract base class with unified `toProtocolUrl()` method

FalkorDBReads credentialsCopilot instructions

QueryWeaver

FalkorDB/QueryWeaver/.github/copilot-instructions.md

here # Optional: set application environment (development, staging, production) # Default: development (affects session cookie security for OAuth) APP_ENV=development # REQUIRED for database connection (preferred) # Use a single connection string

No other project uses it yet