How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
JeffSteinbokCopilot instructionsJeffSteinbok/hass-dreo/.github/copilot-instructions.md
compatibility - **Hassfest** (`hassfest.yaml`) - Validates Home Assistant integration - **Release** (`release.yaml`) - Automated release process ## Important Notes ### Security - Never commit credentials or API keys - Use Home Assistant's config entry for sensitive data
opentensorCopilot instructionsopentensor/subtensor/.github/copilot-instructions.md
Substrate-based blockchain with a $4B market cap. Lives and livelihoods depend on the security and correctness of this code. Be thorough, precise, and uncompromising on safety. ## Branch Strategy
perconaCopilot instructionspercona/percona-postgresql-operator/.github/copilot-instructions.md
controller-runtime). Go + YAML. Key paths: `internal/`, `percona/`, `pkg/apis` and `e2e-tests/`. ## Priority Areas ### Security - Hardcoded secrets, credentials, or API keys - SQL injection—use parameterized queries, never string concatenation - Missing
opengovsgCopilot instructionsopengovsg/FormSG/.github/copilot-instructions.md
DeepWiki Questions**: ``` - "How does the MRF workflow system handle state transitions?" - "What are the security measures in FormSG's submission pipeline?" - "Explain the difference between Email Mode and Storage Mode
CosmianDeletes or force-pushesCopilot instructionsCosmian/kms/.github/copilot-instructions.md
deeper Rust reviews; also the dedicated panic/brutal-exit scan. Not a substitute for semantic or security review | | `/meta-security` | **Comprehensive security audit** — orchestrates all 4 security skills | | `/security-review` | Before PRs affecting security
mapboxReads credentialsCopilot instructionsmapbox/mcp-server/.github/copilot-instructions.md
suggestions to project context - **Iterate** - use suggestions as starting points, not final solutions ### 2. Security First - **Never accept** suggestions with hardcoded secrets, tokens, or credentials - **Review carefully** any code handling
MicrosoftCopilot instructionsmicrosoft/regorus/.github/copilot-instructions.md
policy languages via `src/languages/`. It is used in **production at scale** where **correctness is security-critical** — a bug in policy evaluation can mean `allow` when the answer should be `deny
bx33661Copilot instructionsbx33661/Wireshark-MCP/.github/copilot-instructions.md
GitHub Copilot Repository Instructions For packet capture, protocol analysis, network security monitoring, incident response, and troubleshooting tasks, prefer the canonical project skill in `skills/wireshark-traffic-analysis/`. Use the skill to: - start with
ucam-eoCopilot instructionsucam-eo/geotessera/.github/copilot-instructions.md
Registry**: `registry.parquet` - Parquet metadata with tile locations & hashes ### Hash Verification - Enabled by default for security - Verifies embedding, scale, and landmask files - Can be disabled: `--skip-hash` flag or `GEOTESSERA_SKIP
AzureADCopilot instructionsAzureAD/microsoft-authentication-library-for-objc/.github/copilot-instructions.md
ignored. - Comments containing ` ` or ` ` markers are ignored. - `BLOCK_LABELS` (`automation failure,security,vulnerability,no-ai,do-not-reply`) suppress both initial and PING-COPILOT replies. - The concurrency group `ai-reply
kubernetes-sigsCopilot instructionskubernetes-sigs/jobset/.github/copilot-instructions.md
confusing" - stay silent unless HIGH confidence it will cause problems ## Priority Areas (Review These) ### Security & Safety - Unsafe code blocks without justification - Command injection risks (shell commands, user input) - Path traversal
Green-PTCopilot instructionsGreen-PT/honey-for-devs/.github/copilot-instructions.md
boundaries (user input, network, files, env). - **Error handling** that prevents data loss or corruption. - **Security** — auth checks, escaping, secrets handling. - **Accessibility basics** — labels, roles, keyboard paths. - **Visual/UX design when
esphomeCopilot instructionsesphome/esphome-devices/.github/copilot-instructions.md
text](image.jpg "title")` - ✅ No trailing whitespace - ✅ Files should end with a single newline 4. **Security & Privacy** - ❌ No `!secret` references anywhere in any example yaml, including `!secret wifi_ssid` / `!secret wifi
LuqP2Copilot instructionsLuqP2/Image-MetaHub/.github/copilot-instructions.md
count changes - **Thumbnail Caching**: Separate storage for WebP thumbnails ### IPC Communication Pattern (`preload.js`) ```javascript // Secure API exposure with contextBridge contextBridge.exposeInMainWorld('electronAPI', { listDirectoryFiles: (dirPath) => ipcRenderer.invoke('list-directory-files', dirPath), readFile: (filePath
DitriXNewCopilot instructionsDitriXNew/EDT-MCP/.github/copilot-instructions.md
attempts, architectural decisions 🎯 Select Options - Present 2-5 choices for decisions 📝 Review Code - Security-sensitive or complex implementations ⚠️ Confirm Action - Before deletions, schema changes, breaking changes 🖼️ Read Image - Analyze mockups
powerfooICopilot instructionspowerfooI/herdr-studio/.github/copilot-instructions.md
over new abstractions; watch for missing effect cleanup and stale closures over socket state. - Security: the server runs locally by default but can bind to a non-loopback address
MicrosoftCopilot instructionsmicrosoft/vscode-azurefunctions/.github/copilot-instructions.md
replace regression tests or the technical checks below. Review concrete correctness, reliability, compatibility, security, UX regressions; skip formatting enforced by TypeScript, ESLint, formatting tools. For each changed flow, verify: - Contribution/API
TinyActiveCopilot instructionsTinyActive/nginx-love/.github/copilot-instructions.md
definitions ├── utils/ # Utility functions ├── shared/ # Shared types & constants └── config/ # Application configuration ``` ## 🛡️ Code Review Guidelines ### Security Focus Given this is a security-focused WAF management platform, prioritize: 1. **Authentication & Authorization** - Review
ucsandmanCopilot instructionsucsandman/DashClaw/.github/copilot-instructions.md
production without it doing something expensive, irreversible, or embarrassing."* - **Secondary: governance / compliance / security stakeholders.** They rarely write code but need to audit agent behavior, approve risky actions, and produce evidence
KelvinTegelaarCopilot instructionsKelvinTegelaar/CIPP-API/.github/copilot-instructions.md
administration | | `Email-Exchange/` | Exchange Online | | `Endpoint/` | Intune / device management | | `Identity/` | Entra ID / users / groups | | `Security/` | Defender / Conditional Access | | `Teams-Sharepoint/` | Teams & SharePoint | | `Tenant/` | Tenant-level settings | | `Tools/` | Utility endpoints | ### HTTP
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
