How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Microsoft AzureCopilot instructionsAzure/AppConfiguration/.github/copilot-instructions.md
newest first) - Each entry includes version number, date, and a bulleted list of changes ## Security - Report vulnerabilities through MSRC (https://msrc.microsoft.com/create-report), never via public issues - Never commit secrets, connection
Conceptual-MachinesCopilot instructionsConceptual-Machines/magda-core/.github/copilot-instructions.md
crash/data-loss/security issues with evidence remain **Don't merge when**: - Reproducible crash, data loss, or security vulnerability exists with concrete evidence - Required tests are missing for witnessed critical issues ## Examples
finosCopilot instructionsfinos/git-proxy/.github/copilot-instructions.md
traceability. - Configuration changes must update schema validation, keep backward-compatible defaults, and avoid weakening security by default. - Authentication strategies apply to UI and approval workflows. Git push identity is derived
SamErdeCopilot instructionsSamErde/PowerShell/.github/copilot-instructions.md
suggesting refactoring, explain the benefits - Provide both the solution and alternative approaches when applicable # Security Guidelines - Never hardcode credentials or API keys - Always validate input parameters - Implement proper authentication
MicrosoftCopilot instructionsmicrosoft/Sico/.github/copilot-instructions.md
when frontend source changed and `frontend/package.json` exists: `cd frontend && pnpm build && pnpm lint`. ## Authentication & security notes - User/admin HTTP APIs use **JWT + Casbin** RBAC. - Sandbox client endpoints use a separate **HMAC
SCStelzReads credentialsCopilot instructionsSCStelz/security-investigator/.github/copilot-instructions.md
GitHub Copilot - Security Investigation Integration This workspace contains a security investigation automation system. GitHub Copilot can help you run investigations using natural language. --- ## 📑 TABLE OF CONTENTS 1. **[Critical Workflow Rules
tillahoffmannCopilot instructionstillahoffmann/jax-mps/.github/copilot-instructions.md
exist. Prioritize high-impact feedback. Focus review effort on: - Bugs, correctness issues, and security vulnerabilities - Architectural violations (see guidelines below) - Missing tests for new functionality - Performance problems with measurable impact
MicrosoftDocsCopilot instructionsMicrosoftDocs/entra-docs/.github/copilot-instructions.md
like `authentication`, `conditional-access`, `enterprise-apps`, `saas-apps`, `users`), plus `external-id`, `fundamentals`, `global-secure-access`, `id-governance`, `id-protection`, `identity-platform`, `permissions-management`, `verified-id`, `workload-id`, `agent
MicrosoftCopilot instructionsmicrosoft/AzureTRE/.github/copilot-instructions.md
GitHub Copilot instructions for Azure TRE Azure TRE provisions secure research workspaces on Azure using a Python API, Porter/Terraform bundles and a React/TypeScript UI. Read [AGENTS.md](../AGENTS.md) for the repository
ECPayCopilot instructionsECPay/ECPay-API-Skill/.github/copilot-instructions.md
files, **always run `bash scripts/validate-ai-index.sh`** to confirm line numbers still point to correct headings. ### Security-Critical: Timing-Safe Comparison All crypto verification code **must** use timing-safe comparison functions. Never
KbWenCopilot instructionsKbWen/agentic-os/.github/copilot-instructions.md
review priorities. - Prefer focused, file/line-specific findings over broad style suggestions. - Treat correctness, security, missing tests, governance-bypass, and stale spec/backlog/SSoT metadata as higher priority than formatting. - Do not duplicate
dotnetCopilot instructionsdotnet/maui-labs/.github/copilot-instructions.md
fails closed. - **Register every new `package.json` in `.github/dependabot.yml` in the same PR.** Dependabot security alerts fire repo-wide, but routine *version* updates only run for listed directories. An unregistered project
htekdevReads credentialsCopilot instructionshtekdev/vidpipe/.github/copilot-instructions.md
output | | Git push rejected | Resolve merge conflicts or upstream issues, then retry | | CodeQL security alerts | Run the `security-fixer` agent to remediate all reported alerts | | Copilot Code Review unresolved threads
jeppesensCopilot instructionsjeppesens/eufy-clean/.github/copilot-instructions.md
used for real-time control and status updates - The system uses TLS certificates for secure communication - Messages are exchanged using protobuf definitions #### Home Assistant Integration - The integration follows Home Assistant
MicrosoftCopilot instructionsmicrosoft/sarif-sdk/.github/copilot-instructions.md
visual structure `GH` + `Az` + `DO` is preserved deliberately to read as "GitHub Advanced Security for Azure DevOps". Every type, file, namespace, resource key, and prose mention uses exactly `GHAzDO
apacheCopilot instructionsapache/iceberg-cpp/.github/copilot-instructions.md
praising the code unless it's exceptional. - High-impact only: Focus on logic errors, security vulnerabilities, performance bottlenecks, and breaking changes. - Skip the Obvious: Do not describe what the code
zetxekCopilot instructionszetxek/adritian-free-hugo-theme/.github/copilot-instructions.md
hierarchy, landmarks, etc.) - Test changes with screen readers when modifying navigation or interactive elements ## Security Best Practices - Never commit secrets, API keys, or sensitive data - Use DOMPurify for sanitizing
MicrosoftCopilot instructionsmicrosoft/MicroHack/03-Azure/01-04-AI/01_Agentic_SDLC/.github/copilot-instructions.md
generating suggestions: 1. Prefer incremental, minimal diffs; preserve existing style and naming. 2. Surface security, correctness, and data integrity issues before micro-optimizations. 3. Encourage type safety (no `any` unless
sortie-aiCopilot instructionssortie-ai/sortie/.github/copilot-instructions.md
termination condition. No pointer capture in closures without snapshot/sync. ## 3. Workspace path safety (critical: security boundary) - Containment of workspace paths under `workspace.root` after absolute normalization; no escape symlinks. - Issue identifiers
timothywarner-orgCopilot instructionstimothywarner-org/claude-code/.github/copilot-instructions.md
servers and TypeScript utilities (`utils/`). - `scripts/`: TypeScript and shell utility scripts for setup, security, and documentation. - `.mcp.json`: Project-scoped MCP servers the CLI reads on startup (`microsoft-learn`, `oreilly-july20
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
