How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
AvdLeeCopilot instructionsAvdLee/Core-Data-Agent-Skill/.github/copilot-instructions.md
examples for clarity - Addresses thread safety with NSManagedObjectID - Considers performance implications 5. **Security Considerations** - Scripts should be reviewed for security implications - External dependencies should be clearly documented - No malicious patterns
elsa-workflowsDeletes or force-pushesCopilot instructionselsa-workflows/elsa-studio/.github/copilot-instructions.md
using @antv/x6) - `Localization.*`, `Login.*` - Localization and auth with Blazor-specific variants - `Dashboard`, `Environments`, `Labels`, `Security`, `UIHints`, etc. **Bundles** (`bundles/`) - `Elsa.Studio` - Main bundle combining framework/modules **Hosts** (`hosts/`) - Runnable apps: - `Host.Server` - Blazor
lyeheCopilot instructionslyehe/porterminal/.github/copilot-instructions.md
except`) - Verify async/await patterns are used correctly - Flag any blocking I/O in async contexts ## Security Focus - Check for command injection vulnerabilities in terminal input handling - Verify WebSocket message validation - Ensure
XRPLFCopilot instructionsXRPLF/XRPL-Standards/.github/copilot-instructions.md
reason: [reason] # required only when status is Withdrawn ``` **Required sections** (all XLSes): Abstract, Rationale, Security Considerations. **Amendment XLSes** additionally require the sub-structure from `AMENDMENT_TEMPLATE.md` covering STypes, Ledger Entries, Transactions
14790897Reads credentialsCopilot instructions14790897/MapDistancePro/.github/copilot-instructions.md
NEXT_PUBLIC_AMAP_REST_API_KEY=your_rest_api_key NEXT_PUBLIC_AMAP_SECURITY_CODE=your_security_code NEXT_PUBLIC_DEFAULT_LOCATION=北京市 NEXT_PUBLIC_REQUEST_LIMIT=50 NEXT_PUBLIC
MicrosoftCopilot instructionsmicrosoft/libHttpClient/.github/copilot-instructions.md
compilation via `#if HC_PLATFORM == HC_PLATFORM_*` - Compiler warnings: Level 4, warnings as errors - Security: SDL checks, Control Flow Guard (`/guard:cf`), ASLR ## Build Commands ### Windows (MSBuild) ```powershell # VS2022 — Win32
joshuadavidthomasCopilot instructionsjoshuadavidthomas/opencode-agent-skills/.github/copilot-instructions.md
Done\" --json` 6. **Sync**: `bd sync` (flushes changes to git immediately) ### Priorities - `0` - Critical (security, data loss, broken builds) - `1` - High (major features, important bugs) - `2` - Medium (default, nice
LangChainCopilot instructionslangchain-ai/langchain-community/.github/copilot-instructions.md
filter_unknown_users(users, known_users) assert result == ["charlie"] assert len(result) == 1 ``` ### 4. Security and Risk Assessment **Security Checklist:** - No `eval()`, `exec()`, or `pickle` on user-controlled input - Proper
MicrosoftReads credentialsCopilot instructionsmicrosoft/discovery/utilities/supercomputer-cli/.github/copilot-instructions.md
size - Copy only necessary files (use .dockerignore) - Set PYTHONUNBUFFERED=1 for proper log streaming ### Security Practices - Never hardcode secrets or credentials - Support multiple authentication methods (managed identity, service principal
DIGI-UWCopilot instructionsDIGI-UW/OpenELIS-Global-2/.github/copilot-instructions.md
minimum bar**. For details, see: - `.specify/memory/constitution.md` - `.specify/guides/testing-roadmap.md` - `AGENTS.md` - `PULL_REQUEST_TIPS.md` ## Review priorities - **Blockers first**: security, data integrity, broken workflows, and architecture violations. - **High-risk changes**: authentication/authorization, analyzer interfaces, results reporting, database
Microsoft AzureCopilot instructionsAzure/awesome-azd/.github/copilot-instructions.md
local) - Clear feature list highlighting AI capabilities - CI/CD pipeline setup guidance using azd commands **Security Recommended Practices:** - Use keyless authentication (Managed Identity preferred or Key Vault) instead of API keys
Microsoft AzureCopilot instructionsAzure/git-ape/.github/copilot-instructions.md
destroy`:** - Required reviewers (recommended — destructive action) - Deployment branches: `main` only (triggered on PR merge) ## Security Baseline - Enable HTTPS-only for all web-facing resources - **Always use managed identities** — never
rodrigogsReads credentialsCopilot instructionsrodrigogs/whats-reader/.github/copilot-instructions.md
Docs: https://svelte.dev/docs/svelte/$state - Release Process: `RELEASE.md` - Contributing: `CONTRIBUTING.md` - Privacy Policy: `README.md` (Privacy & Security section
shangyankejiCopilot instructionsshangyankeji/super-dev/.github/copilot-instructions.md
architecture.md`, then realign tasks and implementation before continuing. - If the user requests quality or security remediation, first fix the issues, rerun quality gate plus `super-dev release proof-pack
ReversecLabsReads credentialsCopilot instructionsReversecLabs/spikee/.github/copilot-instructions.md
Spikee AI Agent Instructions Spikee is a modular LLM security testing toolkit (v0.7.3-dev) for prompt injection/jailbreak assessment. ## Core Architecture **Two-Stage Pipeline**: `generator.py` → `tester.py` → `results.py` - Generator composes JSONL datasets from
storybookjsCopilot instructionsstorybookjs/mcp/.github/copilot-instructions.md
made and any migration notes if needed. ``` 4. Version bump types: - `patch`: Bug fixes, security updates, dependency updates (non-breaking) - `minor`: New features (backward compatible) - `major`: Breaking changes 5. Include
joshuadavidthomasCopilot instructionsjoshuadavidthomas/opencode-beads/.github/copilot-instructions.md
Done" --json` 6. **Sync**: `bd sync` (flushes changes to git immediately) ### Priorities - `0` - Critical (security, data loss, broken builds) - `1` - High (major features, important bugs) - `2` - Medium (default, nice
Microsoft AzureCopilot instructionsAzure/AppConfiguration/.github/copilot-instructions.md
newest first) - Each entry includes version number, date, and a bulleted list of changes ## Security - Report vulnerabilities through MSRC (https://msrc.microsoft.com/create-report), never via public issues - Never commit secrets, connection
finosCopilot instructionsfinos/git-proxy/.github/copilot-instructions.md
traceability. - Configuration changes must update schema validation, keep backward-compatible defaults, and avoid weakening security by default. - Authentication strategies apply to UI and approval workflows. Git push identity is derived
Conceptual-MachinesCopilot instructionsConceptual-Machines/magda-core/.github/copilot-instructions.md
crash/data-loss/security issues with evidence remain **Don't merge when**: - Reproducible crash, data loss, or security vulnerability exists with concrete evidence - Required tests are missing for witnessed critical issues ## Examples
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
