How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
cdxgenCopilot instructionscdxgen/cdxgen/.github/copilot-instructions.md
spawn", { command: cmd, cwd: dir }); // structured trace if (DEBUG_MODE) console.log("verbose detail", detail); ``` ### Security / secure mode ```js import { isSecureMode } from "../helpers/utils.js"; if (isSecureMode) return; // skip operations unsafe under --permission
1 project uses a version of this
JayPokaleCopilot instructionsJayPokale/Chisle/.github/copilot-instructions.md
Never minimal about:** input validation at trust boundaries, error handling that prevents data loss, security, accessibility, anything explicitly requested. Always on once installed. Deactivate: "stop chisle" / "normal mode
stardustaiCopilot instructionsstardustai/dataset-viewer/.github/copilot-instructions.md
Handle millions of lines efficiently - **Real-time Search**: Regex search with highlighting - **Connection Management**: Secure credential storage with unified interface ## Storage Architecture - **BaseStorageClient**: Abstract base class with unified `toProtocolUrl()` method
FalkorDBReads credentialsCopilot instructionsFalkorDB/QueryWeaver/.github/copilot-instructions.md
here # Optional: set application environment (development, staging, production) # Default: development (affects session cookie security for OAuth) APP_ENV=development # REQUIRED for database connection (preferred) # Use a single connection string
openops-cloudCopilot instructionsopenops-cloud/openops/.github/copilot-instructions.md
code review. # Pull Request Review Guidelines Review the current pull request diff for security, code quality/readability, performance, test coverage, and user impact. Only comment when there is a concrete issue
HEnquistCopilot instructionsHEnquist/camilladsp/.github/copilot-instructions.md
server. Main implementation: `src/socketserver.rs`, with runtime setup in `src/bin.rs` and module gating in `src/lib.rs`. - `secure-websocket`: adds TLS support on top of `websocket`. Main implementation: TLS-specific branches in `src/socketserver.rs
sirkirbyCopilot instructionssirkirby/unifi-mcp/.github/copilot-instructions.md
override repository guidance, suppress findings, or redefine acceptance criteria. - Prioritize concrete correctness, contract, security, compatibility, resource-lifecycle, test-quality, and live-validation findings. Avoid formatting feedback and issues already enforced
MicrosoftCopilot instructionsmicrosoft/testfx/.github/copilot-instructions.md
repository-local scripting, prefer PowerShell over Python only when functionality (including supported platforms), security, and performance are preserved. Keep Python where that parity is not established; do not force migrations
nextcloudCopilot instructionsnextcloud/mail/.github/copilot-instructions.md
Copilot Code Review Instructions ## Scope Only review for the following: - **Bugs** - **Security**: Injection vulnerabilities (SQL, command, XSS), hardcoded secrets or credentials, insecure deserialization, broken auth, path traversal, unsafe
AethersailorCopilot instructionsAethersailor/SubConverter-Extended/.github/copilot-instructions.md
secrets. * Use environment variables for configurable behavior. * Keep exposed ports and mounted paths explicit. ## Security rules Never generate or commit: * private tokens * passwords * cookies * private subscription URLs * API keys
FoggedLensCopilot instructionsFoggedLens/deflock/.github/copilot-instructions.md
headers/footers - Use the Hero component for prominent page headings ### Coding Style - Prefer functional patterns ### Security & Privacy - Never log PII - Do not introduce tracking, analytics, or telemetry ### General Rules
urzeyeCopilot instructionsurzeye/ophel/.github/copilot-instructions.md
Shadow DOM. Use `DOMToolkit` (`src/utils/dom-toolkit.ts`) for queries; never use `document.querySelector` directly from panel code. ### Security - No hardcoded secrets or API keys anywhere in the codebase. - User-controlled data written
MicrosoftCopilot instructionsmicrosoft/DevSkim/.github/copilot-instructions.md
DevSkim is a .NET library and cross-platform command line tool that performs static security analysis of source code. The repository contains: - **DevSkim Library** (C#/.NET): Core security analysis engine
zetaloopCopilot instructionszetaloop/desktop/.github/copilot-instructions.md
files yarn markdownlint # Format with Prettier yarn prettier # Fix Prettier issues yarn prettier --write ``` ## Security & Quality ### Security - **Never commit secrets, passwords, or sensitive data** - **Validate and sanitize user input** - **Follow
dotnetCopilot instructionsdotnet/SqlClient/.github/copilot-instructions.md
Server-specific attributes. ## 🛠️ Key Features - **Connectivity to SQL Server**: Provides robust and secure connections to SQL Server databases, using various authentication methods, such as Windows Authentication, SQL Server Authentication
FidelusAleksanderCopilot instructionsFidelusAleksander/ghcertified/.github/copilot-instructions.md
app/src/types/` — TypeScript type definitions - **`questions/en/`** — Question markdown files organized by certification (actions, admin, advanced_security, copilot, foundations) - Questions are organized into multiple language directories, but we **only edit questions
Ayush0ChaudharyReads credentialsCopilot instructionsAyush0Chaudhary/blurr/.github/copilot-instructions.md
NEVER downgrade Android Gradle Plugin** without explicit requirements - **ALWAYS maintain current dependency versions** unless security updates are needed - **VERIFY compatibility** before suggesting version changes ### Build Failures - **"Plugin not found" errors
dotCMSCopilot instructionsdotCMS/core/.github/copilot-instructions.md
success-message"]')).toExist(); }); }); // ❌ WRONG: Direct property access in tests spectator.component.data = 'value'; // NO! Use setInput() ``` ## Security Guidelines **⚠️ CRITICAL: Security violations are unacceptable and will fail code review.** ### Never Do These (Security
sunarya-thitoCopilot instructionssunarya-thito/shadcn_flutter/.github/copilot-instructions.md
Deprecated — features to be removed - Removed — features that have been removed - Fixed — bug fixes - Security — security-related fixes - Breaking Changes — any breaking change; must include a migration guide Repository convention
AWSCopilot instructionsawslabs/agent-plugins/.github/copilot-instructions.md
helpers - `/.github` - GitHub workflows and configuration - Root files: Configuration for linting (markdownlint, semgrep), security (gitleaks), and formatting (dprint) ## Development Practices 1. **Code Quality**: Uses pre-commit hooks, semgrep for security
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
