How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
lkk989Copilot instructionslkk989/Volt-Deep-Research/.github/copilot-instructions.md
memory bank", refresh `activeContext.md` & `progress.md` - 🏗️ For new features, create spec first in `memory-bank/` ## 🔒 Security & Code Quality - 🔐 Never commit API keys, `.env`, or credentials - ✅ Run `npm run lint
techdebtgptCopilot instructionstechdebtgpt/architecture-doc-generator/.github/copilot-instructions.md
patterns ├── flow-visualization-agent.ts # MEDIUM priority - Control/data flows ├── schema-generator-agent.ts # MEDIUM priority - Data models └── security-analyzer-agent.ts # MEDIUM priority - Security vulnerabilities (NEW!) ``` **Agent Implementation Pattern** (uses BaseAgentWorkflow with LangGraph): All agents extend `BaseAgentWorkflow` which provides
thoreinsteinCopilot instructionsthoreinstein/aix/.github/copilot-instructions.md
lint to pass first) - **Build**: Builds binary and runs `./aix --help` verification 2. **codeql.yml** - Security scanning (runs on push/PR and weekly) - CodeQL analysis for Go code 3. **release.yml** - Release automation
aiperceivableCopilot instructionsaiperceivable/apcore-python/.github/copilot-instructions.md
Linting - After changes, always run: - ruff check --fix . - black . - pyright . - Zero errors/warnings before commit. ### Security & Performance - Never hardcode secrets; use env/config. - Validate/sanitize inputs. - Avoid unjustified quadratic+ complexity in hot paths
Microsoft AzureCopilot instructionsAzure/sap-automation-qa/.github/copilot-instructions.md
handling. - SSH credential provisioning with auto-detect (Key Vault MSI or local workspace files). ### Security - Least privilege: non-root Docker user (`appuser:1000`). - No plaintext secrets: Azure Key Vault integration
dkackmanCopilot instructionsdkackman/diffusers-workflow/.github/copilot-instructions.md
custom community pipelines **Device Management:** Automatic CUDA detection with fallback, memory optimization via offloading ## Security **Critical security module** (`dw/security.py`) provides comprehensive input validation and protection: - **Path validation**: Prevents traversal attacks
Hack23Copilot instructionsHack23/euparliamentmonitor/.github/copilot-instructions.md
available tools 3. **`README.md`** - Project overview, features, and documentation links 4. **`.github/skills/`** - Skills library (security, architecture, compliance, testing, gh-aw) 5. **`.github/agents/`** - Specialized agents for delegation ## 🎯 Project Overview **EU Parliament
HMAKT99Copilot instructionsHMAKT99/AKF/.github/copilot-instructions.md
inspect ` — Pretty-print trust scores - `akf embed ` — Embed metadata into DOCX/PDF/images - `akf scan ` — Security scan a directory - `akf audit ` — Compliance audit (EU AI Act, SOX, NIST) - `akf trust ` — Compute effective
MicrosoftCopilot instructionsmicrosoft/agentic-sdlc-starter/.github/copilot-instructions.md
actual content - **Data classification:** All contract data is Confidential. Treat accordingly. ### Security - Input validation on all user queries (max 2000 chars, sanitize) - No raw string interpolation in Cypher queries
putervisionCopilot instructionsputervision/agent-reasoning-mcp/.github/copilot-instructions.md
state`: Poll and wait until an entity reaches a specific spatial condition. # Cryptographic Vault & Security (webcrypt-mcp) This project provides native `webcrypt-mcp` tooling for zero-dependency
Microsoft AzureCopilot instructionsAzure/Microsoft.AVS.Management/.github/copilot-instructions.md
conditional parameters — split into separate cmdlets instead. - No child processes — find PowerShell-native alternatives. ### Security (Critical) - **Never** call `Connect-VIServer` or `Connect-SsoAdminServer` in scripts — AVS pre-establishes admin sessions
CynrathCopilot instructionsCynrath/agent-context-kit/.github/copilot-instructions.md
Copilot Instructions Prefer minimal, tested, secure changes that follow the project docs and task files. ## Maintenance Note This file is hand-maintained. `ackit generate` does not regenerate it. Update
putervisionCopilot instructionsputervision/behavior-mcp/.github/copilot-instructions.md
state`: Poll and wait until an entity reaches a specific spatial condition. # Cryptographic Vault & Security (webcrypt-mcp) This project provides native `webcrypt-mcp` tooling for zero-dependency
CrestAppsCopilot instructionsCrestApps/CrestApps.AgentSkills/.github/copilot-instructions.md
setup, tenants, data-migrations, background-tasks, caching - **Recipes & Deployment**: recipes, deployments, autoroute, site-settings - **Security**: security, users-roles, openid - **UI & Navigation**: navigation, menus, widgets, forms, admin - **Search & Media**: search-indexing
Smithbox-aiCopilot instructionsSmithbox-ai/ControlFlow/.github/copilot-instructions.md
needs_replan` — Architecture mismatch or missing dependency; delegate to Planner for targeted replan. - `escalate` — Security vulnerability, data integrity risk, or unresolvable blocker; stop and await human approval. - `model_unavailable
zprattCopilot instructionszpratt/lousy-agents/.github/copilot-instructions.md
smoke-test (test-integration and smoke-test both depend on build) # Other npm audit # Security check npm install # Install deps (updates package-lock.json) ``` **Note**: In GitHub Actions, `jdx/mise-action` automatically activates mise
btseeeCopilot instructionsbtseee/clean-code-skills/.github/copilot-instructions.md
changed behavior, or tests weakened to pass - concurrency, lifecycle, cancellation, or shared-state hazards - security-sensitive input, output, storage, logging, and permissions Avoid language-specific rules in this file unless
kagura-aiCopilot instructionskagura-ai/memory-cloud/.github/copilot-instructions.md
Copilot Review Instructions ## Priority - Report only high-signal issues: correctness bugs, security vulnerabilities, data loss risks, concurrency problems, performance regressions, broken a11y. - Skip pure style nits unless they mask
MicrosoftCopilot instructionsmicrosoft/AgentPlatformAdvisor/.github/copilot-instructions.md
param above arrives from a URL a stranger may have edited, and two real security bugs have already come from treating them as trusted. Validate at the boundary in `parseURLParams
qlik-ossCopilot instructionsqlik-oss/agentic-skills/.github/copilot-instructions.md
runtime verification. - Treat new scripts, tool access, outbound network calls, and file writes as security-sensitive changes. - Prefer least-privilege tool declarations and sanitized example data. - Describe
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
