How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
ReversecLabsReads credentialsCopilot instructionsReversecLabs/spikee/.github/copilot-instructions.md
Spikee AI Agent Instructions Spikee is a modular LLM security testing toolkit (v0.7.3-dev) for prompt injection/jailbreak assessment. ## Core Architecture **Two-Stage Pipeline**: `generator.py` → `tester.py` → `results.py` - Generator composes JSONL datasets from
finosCopilot instructionsfinos/git-proxy/.github/copilot-instructions.md
traceability. - Configuration changes must update schema validation, keep backward-compatible defaults, and avoid weakening security by default. - Authentication strategies apply to UI and approval workflows. Git push identity is derived
SamErdeCopilot instructionsSamErde/PowerShell/.github/copilot-instructions.md
suggesting refactoring, explain the benefits - Provide both the solution and alternative approaches when applicable # Security Guidelines - Never hardcode credentials or API keys - Always validate input parameters - Implement proper authentication
Conceptual-MachinesCopilot instructionsConceptual-Machines/magda-core/.github/copilot-instructions.md
crash/data-loss/security issues with evidence remain **Don't merge when**: - Reproducible crash, data loss, or security vulnerability exists with concrete evidence - Required tests are missing for witnessed critical issues ## Examples
MicrosoftCopilot instructionsmicrosoft/Sico/.github/copilot-instructions.md
when frontend source changed and `frontend/package.json` exists: `cd frontend && pnpm build && pnpm lint`. ## Authentication & security notes - User/admin HTTP APIs use **JWT + Casbin** RBAC. - Sandbox client endpoints use a separate **HMAC
SCStelzReads credentialsCopilot instructionsSCStelz/security-investigator/.github/copilot-instructions.md
GitHub Copilot - Security Investigation Integration This workspace contains a security investigation automation system. GitHub Copilot can help you run investigations using natural language. --- ## 📑 TABLE OF CONTENTS 1. **[Critical Workflow Rules
tillahoffmannCopilot instructionstillahoffmann/jax-mps/.github/copilot-instructions.md
exist. Prioritize high-impact feedback. Focus review effort on: - Bugs, correctness issues, and security vulnerabilities - Architectural violations (see guidelines below) - Missing tests for new functionality - Performance problems with measurable impact
MicrosoftDocsCopilot instructionsMicrosoftDocs/entra-docs/.github/copilot-instructions.md
like `authentication`, `conditional-access`, `enterprise-apps`, `saas-apps`, `users`), plus `external-id`, `fundamentals`, `global-secure-access`, `id-governance`, `id-protection`, `identity-platform`, `permissions-management`, `verified-id`, `workload-id`, `agent
MicrosoftCopilot instructionsmicrosoft/AzureTRE/.github/copilot-instructions.md
GitHub Copilot instructions for Azure TRE Azure TRE provisions secure research workspaces on Azure using a Python API, Porter/Terraform bundles and a React/TypeScript UI. Read [AGENTS.md](../AGENTS.md) for the repository
ECPayCopilot instructionsECPay/ECPay-API-Skill/.github/copilot-instructions.md
files, **always run `bash scripts/validate-ai-index.sh`** to confirm line numbers still point to correct headings. ### Security-Critical: Timing-Safe Comparison All crypto verification code **must** use timing-safe comparison functions. Never
dotnetCopilot instructionsdotnet/maui-labs/.github/copilot-instructions.md
fails closed. - **Register every new `package.json` in `.github/dependabot.yml` in the same PR.** Dependabot security alerts fire repo-wide, but routine *version* updates only run for listed directories. An unregistered project
apacheCopilot instructionsapache/iceberg-cpp/.github/copilot-instructions.md
praising the code unless it's exceptional. - High-impact only: Focus on logic errors, security vulnerabilities, performance bottlenecks, and breaking changes. - Skip the Obvious: Do not describe what the code
htekdevReads credentialsCopilot instructionshtekdev/vidpipe/.github/copilot-instructions.md
output | | Git push rejected | Resolve merge conflicts or upstream issues, then retry | | CodeQL security alerts | Run the `security-fixer` agent to remediate all reported alerts | | Copilot Code Review unresolved threads
MicrosoftCopilot instructionsmicrosoft/sarif-sdk/.github/copilot-instructions.md
visual structure `GH` + `Az` + `DO` is preserved deliberately to read as "GitHub Advanced Security for Azure DevOps". Every type, file, namespace, resource key, and prose mention uses exactly `GHAzDO
zetxekCopilot instructionszetxek/adritian-free-hugo-theme/.github/copilot-instructions.md
hierarchy, landmarks, etc.) - Test changes with screen readers when modifying navigation or interactive elements ## Security Best Practices - Never commit secrets, API keys, or sensitive data - Use DOMPurify for sanitizing
KbWenCopilot instructionsKbWen/agentic-os/.github/copilot-instructions.md
review priorities. - Prefer focused, file/line-specific findings over broad style suggestions. - Treat correctness, security, missing tests, governance-bypass, and stale spec/backlog/SSoT metadata as higher priority than formatting. - Do not duplicate
timothywarner-orgCopilot instructionstimothywarner-org/claude-code/.github/copilot-instructions.md
servers and TypeScript utilities (`utils/`). - `scripts/`: TypeScript and shell utility scripts for setup, security, and documentation. - `.mcp.json`: Project-scoped MCP servers the CLI reads on startup (`microsoft-learn`, `oreilly-july20
kooshiCopilot instructionskooshi/SharpToolsMCP/.github/copilot-instructions.md
Data Structures, Design patterns, Functional programming, Parallel programming You focus on elegance, maintainability, readability, security, "clean code", and best practices. You always write the minimum amount of code to accomplish
MicrosoftCopilot instructionsmicrosoft/RecursiveExtractor/.github/copilot-instructions.md
test data directories - Include edge cases: nested archives, encrypted files, malformed content, zip bombs ## Security Considerations - The library includes protections against ZipSlip, Quines, and Zip Bombs - Always validate file paths
Rbillon59Copilot instructionsRbillon59/hass-n8n/.github/copilot-instructions.md
packages n8n (workflow automation tool) as a Docker container with nginx reverse proxy for secure access through Home Assistant's ingress system. Always reference these instructions first and fallback
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
