How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
SamErdeCopilot instructionsSamErde/PowerShell/.github/copilot-instructions.md
suggesting refactoring, explain the benefits - Provide both the solution and alternative approaches when applicable # Security Guidelines - Never hardcode credentials or API keys - Always validate input parameters - Implement proper authentication
MicrosoftCopilot instructionsmicrosoft/Sico/.github/copilot-instructions.md
when frontend source changed and `frontend/package.json` exists: `cd frontend && pnpm build && pnpm lint`. ## Authentication & security notes - User/admin HTTP APIs use **JWT + Casbin** RBAC. - Sandbox client endpoints use a separate **HMAC
SCStelzReads credentialsCopilot instructionsSCStelz/security-investigator/.github/copilot-instructions.md
GitHub Copilot - Security Investigation Integration This workspace contains a security investigation automation system. GitHub Copilot can help you run investigations using natural language. --- ## 📑 TABLE OF CONTENTS 1. **[Critical Workflow Rules
tillahoffmannCopilot instructionstillahoffmann/jax-mps/.github/copilot-instructions.md
exist. Prioritize high-impact feedback. Focus review effort on: - Bugs, correctness issues, and security vulnerabilities - Architectural violations (see guidelines below) - Missing tests for new functionality - Performance problems with measurable impact
MicrosoftDocsCopilot instructionsMicrosoftDocs/entra-docs/.github/copilot-instructions.md
like `authentication`, `conditional-access`, `enterprise-apps`, `saas-apps`, `users`), plus `external-id`, `fundamentals`, `global-secure-access`, `id-governance`, `id-protection`, `identity-platform`, `permissions-management`, `verified-id`, `workload-id`, `agent
MicrosoftCopilot instructionsmicrosoft/AzureTRE/.github/copilot-instructions.md
GitHub Copilot instructions for Azure TRE Azure TRE provisions secure research workspaces on Azure using a Python API, Porter/Terraform bundles and a React/TypeScript UI. Read [AGENTS.md](../AGENTS.md) for the repository
ECPayCopilot instructionsECPay/ECPay-API-Skill/.github/copilot-instructions.md
files, **always run `bash scripts/validate-ai-index.sh`** to confirm line numbers still point to correct headings. ### Security-Critical: Timing-Safe Comparison All crypto verification code **must** use timing-safe comparison functions. Never
dotnetCopilot instructionsdotnet/maui-labs/.github/copilot-instructions.md
fails closed. - **Register every new `package.json` in `.github/dependabot.yml` in the same PR.** Dependabot security alerts fire repo-wide, but routine *version* updates only run for listed directories. An unregistered project
htekdevReads credentialsCopilot instructionshtekdev/vidpipe/.github/copilot-instructions.md
output | | Git push rejected | Resolve merge conflicts or upstream issues, then retry | | CodeQL security alerts | Run the `security-fixer` agent to remediate all reported alerts | | Copilot Code Review unresolved threads
KbWenCopilot instructionsKbWen/agentic-os/.github/copilot-instructions.md
review priorities. - Prefer focused, file/line-specific findings over broad style suggestions. - Treat correctness, security, missing tests, governance-bypass, and stale spec/backlog/SSoT metadata as higher priority than formatting. - Do not duplicate
jeppesensCopilot instructionsjeppesens/eufy-clean/.github/copilot-instructions.md
used for real-time control and status updates - The system uses TLS certificates for secure communication - Messages are exchanged using protobuf definitions #### Home Assistant Integration - The integration follows Home Assistant
MicrosoftCopilot instructionsmicrosoft/sarif-sdk/.github/copilot-instructions.md
visual structure `GH` + `Az` + `DO` is preserved deliberately to read as "GitHub Advanced Security for Azure DevOps". Every type, file, namespace, resource key, and prose mention uses exactly `GHAzDO
apacheCopilot instructionsapache/iceberg-cpp/.github/copilot-instructions.md
praising the code unless it's exceptional. - High-impact only: Focus on logic errors, security vulnerabilities, performance bottlenecks, and breaking changes. - Skip the Obvious: Do not describe what the code
zetxekCopilot instructionszetxek/adritian-free-hugo-theme/.github/copilot-instructions.md
hierarchy, landmarks, etc.) - Test changes with screen readers when modifying navigation or interactive elements ## Security Best Practices - Never commit secrets, API keys, or sensitive data - Use DOMPurify for sanitizing
timothywarner-orgCopilot instructionstimothywarner-org/claude-code/.github/copilot-instructions.md
servers and TypeScript utilities (`utils/`). - `scripts/`: TypeScript and shell utility scripts for setup, security, and documentation. - `.mcp.json`: Project-scoped MCP servers the CLI reads on startup (`microsoft-learn`, `oreilly-july20
kooshiCopilot instructionskooshi/SharpToolsMCP/.github/copilot-instructions.md
Data Structures, Design patterns, Functional programming, Parallel programming You focus on elegance, maintainability, readability, security, "clean code", and best practices. You always write the minimum amount of code to accomplish
accordprojectDeletes or force-pushesCopilot instructionsaccordproject/concerto/.github/copilot-instructions.md
ModelFile { constructor() { this._validationCache = null; } validate() { if (!this._validationCache) { this._validationCache = this._performValidation(); } return this._validationCache; } clearCache() { this._validationCache = null; } } ``` --- ## Security Considerations ### Model Validation **Always Validate Untrusted Input**: ```javascript // User-provided model file const userModel = req.body.modelContent
jonathan-vellaReads credentialsCopilot instructionsjonathan-vella/apex/.github/copilot-instructions.md
required contract — `ManagedBy` may > still be emitted as an optional deploy-provenance marker. ### Security baseline + AVM mandate Non-negotiable: HTTPS-only, TLS 1.2 minimum, no public blob, Managed Identity over
MicrosoftCopilot instructionsmicrosoft/MicroHack/03-Azure/01-04-AI/01_Agentic_SDLC/.github/copilot-instructions.md
generating suggestions: 1. Prefer incremental, minimal diffs; preserve existing style and naming. 2. Surface security, correctness, and data integrity issues before micro-optimizations. 3. Encourage type safety (no `any` unless
MicrosoftCopilot instructionsmicrosoft/RecursiveExtractor/.github/copilot-instructions.md
test data directories - Include edge cases: nested archives, encrypted files, malformed content, zip bombs ## Security Considerations - The library includes protections against ZipSlip, Quines, and Zip Bombs - Always validate file paths
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
