How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
TinyActiveCopilot instructionsTinyActive/nginx-love/.github/copilot-instructions.md
definitions ├── utils/ # Utility functions ├── shared/ # Shared types & constants └── config/ # Application configuration ``` ## 🛡️ Code Review Guidelines ### Security Focus Given this is a security-focused WAF management platform, prioritize: 1. **Authentication & Authorization** - Review
ucsandmanCopilot instructionsucsandman/DashClaw/.github/copilot-instructions.md
production without it doing something expensive, irreversible, or embarrassing."* - **Secondary: governance / compliance / security stakeholders.** They rarely write code but need to audit agent behavior, approve risky actions, and produce evidence
KelvinTegelaarCopilot instructionsKelvinTegelaar/CIPP-API/.github/copilot-instructions.md
administration | | `Email-Exchange/` | Exchange Online | | `Endpoint/` | Intune / device management | | `Identity/` | Entra ID / users / groups | | `Security/` | Defender / Conditional Access | | `Teams-Sharepoint/` | Teams & SharePoint | | `Tenant/` | Tenant-level settings | | `Tools/` | Utility endpoints | ### HTTP
14790897Reads credentialsCopilot instructions14790897/MapDistancePro/.github/copilot-instructions.md
NEXT_PUBLIC_AMAP_REST_API_KEY=your_rest_api_key NEXT_PUBLIC_AMAP_SECURITY_CODE=your_security_code NEXT_PUBLIC_DEFAULT_LOCATION=北京市 NEXT_PUBLIC_REQUEST_LIMIT=50 NEXT_PUBLIC
AvdLeeCopilot instructionsAvdLee/Core-Data-Agent-Skill/.github/copilot-instructions.md
examples for clarity - Addresses thread safety with NSManagedObjectID - Considers performance implications 5. **Security Considerations** - Scripts should be reviewed for security implications - External dependencies should be clearly documented - No malicious patterns
elsa-workflowsDeletes or force-pushesCopilot instructionselsa-workflows/elsa-studio/.github/copilot-instructions.md
using @antv/x6) - `Localization.*`, `Login.*` - Localization and auth with Blazor-specific variants - `Dashboard`, `Environments`, `Labels`, `Security`, `UIHints`, etc. **Bundles** (`bundles/`) - `Elsa.Studio` - Main bundle combining framework/modules **Hosts** (`hosts/`) - Runnable apps: - `Host.Server` - Blazor
lyeheCopilot instructionslyehe/porterminal/.github/copilot-instructions.md
except`) - Verify async/await patterns are used correctly - Flag any blocking I/O in async contexts ## Security Focus - Check for command injection vulnerabilities in terminal input handling - Verify WebSocket message validation - Ensure
XRPLFCopilot instructionsXRPLF/XRPL-Standards/.github/copilot-instructions.md
reason: [reason] # required only when status is Withdrawn ``` **Required sections** (all XLSes): Abstract, Rationale, Security Considerations. **Amendment XLSes** additionally require the sub-structure from `AMENDMENT_TEMPLATE.md` covering STypes, Ledger Entries, Transactions
MicrosoftCopilot instructionsmicrosoft/libHttpClient/.github/copilot-instructions.md
compilation via `#if HC_PLATFORM == HC_PLATFORM_*` - Compiler warnings: Level 4, warnings as errors - Security: SDL checks, Control Flow Guard (`/guard:cf`), ASLR ## Build Commands ### Windows (MSBuild) ```powershell # VS2022 — Win32
joshuadavidthomasCopilot instructionsjoshuadavidthomas/opencode-agent-skills/.github/copilot-instructions.md
Done\" --json` 6. **Sync**: `bd sync` (flushes changes to git immediately) ### Priorities - `0` - Critical (security, data loss, broken builds) - `1` - High (major features, important bugs) - `2` - Medium (default, nice
LangChainCopilot instructionslangchain-ai/langchain-community/.github/copilot-instructions.md
filter_unknown_users(users, known_users) assert result == ["charlie"] assert len(result) == 1 ``` ### 4. Security and Risk Assessment **Security Checklist:** - No `eval()`, `exec()`, or `pickle` on user-controlled input - Proper
DIGI-UWCopilot instructionsDIGI-UW/OpenELIS-Global-2/.github/copilot-instructions.md
minimum bar**. For details, see: - `.specify/memory/constitution.md` - `.specify/guides/testing-roadmap.md` - `AGENTS.md` - `PULL_REQUEST_TIPS.md` ## Review priorities - **Blockers first**: security, data integrity, broken workflows, and architecture violations. - **High-risk changes**: authentication/authorization, analyzer interfaces, results reporting, database
MicrosoftReads credentialsCopilot instructionsmicrosoft/discovery/utilities/supercomputer-cli/.github/copilot-instructions.md
size - Copy only necessary files (use .dockerignore) - Set PYTHONUNBUFFERED=1 for proper log streaming ### Security Practices - Never hardcode secrets or credentials - Support multiple authentication methods (managed identity, service principal
Microsoft AzureCopilot instructionsAzure/git-ape/.github/copilot-instructions.md
destroy`:** - Required reviewers (recommended — destructive action) - Deployment branches: `main` only (triggered on PR merge) ## Security Baseline - Enable HTTPS-only for all web-facing resources - **Always use managed identities** — never
rodrigogsReads credentialsCopilot instructionsrodrigogs/whats-reader/.github/copilot-instructions.md
Docs: https://svelte.dev/docs/svelte/$state - Release Process: `RELEASE.md` - Contributing: `CONTRIBUTING.md` - Privacy Policy: `README.md` (Privacy & Security section
shangyankejiCopilot instructionsshangyankeji/super-dev/.github/copilot-instructions.md
architecture.md`, then realign tasks and implementation before continuing. - If the user requests quality or security remediation, first fix the issues, rerun quality gate plus `super-dev release proof-pack
Microsoft AzureCopilot instructionsAzure/awesome-azd/.github/copilot-instructions.md
local) - Clear feature list highlighting AI capabilities - CI/CD pipeline setup guidance using azd commands **Security Recommended Practices:** - Use keyless authentication (Managed Identity preferred or Key Vault) instead of API keys
storybookjsCopilot instructionsstorybookjs/mcp/.github/copilot-instructions.md
made and any migration notes if needed. ``` 4. Version bump types: - `patch`: Bug fixes, security updates, dependency updates (non-breaking) - `minor`: New features (backward compatible) - `major`: Breaking changes 5. Include
joshuadavidthomasCopilot instructionsjoshuadavidthomas/opencode-beads/.github/copilot-instructions.md
Done" --json` 6. **Sync**: `bd sync` (flushes changes to git immediately) ### Priorities - `0` - Critical (security, data loss, broken builds) - `1` - High (major features, important bugs) - `2` - Medium (default, nice
Microsoft AzureCopilot instructionsAzure/AppConfiguration/.github/copilot-instructions.md
newest first) - Each entry includes version number, date, and a bulleted list of changes ## Security - Report vulnerabilities through MSRC (https://msrc.microsoft.com/create-report), never via public issues - Never commit secrets, connection
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
