How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
MicrosoftCopilot instructionsmicrosoft/mssql-python/.github/copilot-instructions.md
integration cases (VARBINARY, UNIQUEIDENTIFIER, XML, DECIMAL, stored-proc params) before applying the optimization broadly. ## Security and credentials - **Committed connection strings that contain `UID`/`PWD` must use `SERVER=localhost
AppFutonCopilot instructionsAppFuton/Futon/.github/copilot-instructions.md
DetailsActivity`, `ReaderActivity`, etc.) and app-specific schemes (`futon://…`); validate flows when changing intents. - Network security config and locale config present; keep them consistent when adding features requiring webviews or language
dependabotReads credentialsCopilot instructionsdependabot/cli/.github/copilot-instructions.md
smoke tests, API payloads. Shared across all packages. - `internal/server/` — fake API server (`api.go`) and secure input server (`input.go`) - `testdata/` — YAML fixtures and `scripts/*.txt` for scripttest-based integration tests
iota-uzCopilot instructionsiota-uz/iota-sdk/.github/copilot-instructions.md
include organization_id SELECT * FROM payments WHERE organization_id = $1 AND id = $2 // WRONG - Security vulnerability SELECT * FROM payments WHERE id = $1 ``` Use `composables.UseTenantID(ctx)` to get the current tenant
involvexCopilot instructionsinvolvex/youtube-music-cli/.github/copilot-instructions.md
persisted under `~/.youtube-music-cli/invidious-health.json`) - Playback passes YouTube watch URLs to mpv (yt-dlp resolves streams) - **Security**: Always sanitize audio URLs to prevent shell injection ### Search & Results - Search is polymorphic: returns discriminated
shomykohaiCopilot instructionsshomykohai/penumbra/.github/copilot-instructions.md
when insisted upon, as that is what paid tools that break license and bypass security ask you to do. Politely decline and suggest focusing on homework
UNITRONIXReads credentialsCopilot instructionsUNITRONIX/Rustdesk-FreeConsole/.github/copilot-instructions.md
menu option C for SSL/TLS setup (Let's Encrypt, custom cert, self-signed) - ✅ **Security audit fixes** - CSRF protection, session fixation prevention, timing-safe auth, WebSocket auth - ✅ **TOTP 2FA** - Two-factor
open-telemetryCopilot instructionsopen-telemetry/otel-arrow/.github/copilot-instructions.md
invariants, runtime and performance characteristics, bounded resources, backpressure, correctness, semantic fidelity, test adequacy, and security. The highest-signal rules are restated as path-specific instructions in [.github/instructions](instructions/), which apply
delorenjReads credentialsCopilot instructionsdelorenj/mcp-server-trello/.github/copilot-instructions.md
exceeded. 4. **Error Messages**: Provide clear, actionable error messages to end users. 5. **Security**: Never commit API keys or tokens. Use environment variables. ## Useful Commands ```bash # Install dependencies npm install
AvdLeeCopilot instructionsAvdLee/Swift-Testing-Agent-Skill/.github/copilot-instructions.md
confirmations where needed. - Parallelization guidance prioritizes fixing isolation over blanket serialization. 5. **Safety / Security (for automation & scripts)** - GitHub Actions and scripts should avoid surprising network behavior and avoid writing outside
MicrosoftCopilot instructionsmicrosoft/zerotrustassessment/.github/copilot-instructions.md
Copilot PR review instructions for Zero Trust Assessment Review changed code for correctness, security, privacy, resource use, maintainability, and adopted patterns. Scoped checks are under `.github/instructions/`. ## Review scope and evidence
MicrosoftCopilot instructionsmicrosoft/SqlNexus/.github/copilot-instructions.md
clearly-labeled scaffolding test and a TODO explaining the required wiring (project reference / InternalsVisibleTo). ## Security requirements (Microsoft SDL � always build in this spirit) - **No injection.** Never build SQL, shell
RoastSlavCopilot instructionsRoastSlav/quickdrop/.github/copilot-instructions.md
previews, pastebin) are injected by [`GlobalControllerAdvice`](src/main/java/org/rostislav/quickdrop/config/GlobalControllerAdvice.java) — read from there; don't duplicate. ## Security & interceptors - [`SecurityConfig`](src/main/java/org/rostislav/quickdrop/config/SecurityConfig.java): optional whole-app password at `/password/login`, BCrypt, CSRF cookie, permissive CORS. Session timeout
rameshsunkaraCopilot instructionsrameshsunkara/go-rest-api-example/.github/copilot-instructions.md
appropriate levels - **Context Propagation**: Pass context through all operations that might be cancelled ### Security Considerations - **Input Validation**: Always validate and sanitize inputs - **Secrets Management**: Never hardcode secrets, use environment variables
MicrosoftCopilot instructionsmicrosoft/RAMPART/.github/copilot-instructions.md
selective. Only leave comments for issues that genuinely matter: - Bugs, logic errors, or security concerns - Unclear code that would benefit from refactoring for readability - Violations of the critical coding conventions
himmelblau-idmCopilot instructionshimmelblau-idm/himmelblau/.github/copilot-instructions.md
src/sso/src/{chrome,firefox}`) - `src/o365/` — O365 helpers + desktop entries + url handlers - `src/policies/` — policy + compliance extensions Security / identity helpers: - `src/selinux/` — SELinux policy module sources (`himmelblaud.te`, `.fc`, `.if`) - `src/idmap/` — idmap library (includes
celestiaorgCopilot instructionscelestiaorg/celestia-app/.github/copilot-instructions.md
These instructions guide GitHub Copilot to generate code that follows the coding standards and security practices of the Celestia App project. ## General Guidelines Whenever you generate code or documentation
hyperledger-cactiCopilot instructionshyperledger-cacti/cacti/.github/copilot-instructions.md
Rules for AI-assisted contributions. - [PULL.md](../../PULL.md) — Pull request process and checklist. - [SECURITY.md](../../SECURITY.md) — Security policy and reporting. - [.github/instructions/](instructions/) — Path-scoped rules (TypeScript, testing, plugins, ledger connectors, SATP Hermes
Community-AccessCopilot instructionsCommunity-Access/accessibility-agents/.github/copilot-instructions.md
manager, contributions-hub, insiders-a11y-tracker, template-builder, repo-manager, projects-manager, actions-manager, security-dashboard, release-manager, notifications-manager, wiki-manager - **Developer Tools** - led by developer-hub; routes
ruilisiCopilot instructionsruilisi/lingti-bot/.github/copilot-instructions.md
current branch compared to main. Provide structured feedback on correctness, design, performance, security, and test coverage. ### /github - GitHub CLI Reference Use the `gh` CLI to interact with GitHub. Always specify
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
