How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
directusCopilot instructionsdirectus/directus/.github/copilot-instructions.md
DevTools for debugging the frontend - Check logs in the console for API errors ## Security - Never commit secrets or credentials - Use environment variables for configuration - Follow OWASP best practices - Run CodeQL
No other project uses it yet
dotnetCopilot instructionsdotnet/aspnetcore/.github/copilot-instructions.md
When working on issues under the src/Components area, follow the instructions in [./instructions/components.instructions.md](./instructions/components.instructions.md). ## Security Concerns Are Out of Scope Do NOT assess, discuss, or make recommendations about potential security
istioCopilot instructionsistio/istio/.github/copilot-instructions.md
Overview - **Istio** is an open source service mesh that provides a uniform way to secure, connect, and monitor microservices. It is designed to work with Kubernetes and other cluster management
No other project uses it yet
agentscope-aiCopilot instructionsagentscope-ai/agentscope/.github/copilot-instructions.md
need to be exposed to users must be named with `_` prefix ## 2. [MUST] Code Security - Prohibit hardcoding API keys/tokens/passwords - Use environment variables or configuration files for management - Check for debug
No other project uses it yet
GitHubReads credentialsCopilot instructionsgithub/github-mcp-server/.github/copilot-instructions.md
date by running generate-docs and checking git diff 4. **code-scanning.yml** - CodeQL security analysis for Go and GitHub Actions 5. **license-check.yml** - Runs `script/licenses-check` to validate compliance 6. **docker-publish.yml** - Publishes container
zeromicroCopilot instructionszeromicro/go-zero/.github/copilot-instructions.md
Load shedding**: Implement adaptive load shedding 5. **Metrics**: Add appropriate metrics and monitoring ## Security Guidelines 1. **Input validation**: Validate all input parameters 2. **SQL injection prevention**: Use parameterized queries
No other project uses it yet
mukul975Copilot instructionsmukul975/Anthropic-Cybersecurity-Skills/.github/copilot-instructions.md
Facts - **Type**: Open-source cybersecurity skills library + framework mapping hub - **Skills**: 817 across 29 security domains - **Frameworks**: 6 (MITRE ATT&CK v14, NIST CSF 2.0, MITRE ATLAS, MITRE D3FEND, NIST
No other project uses it yet
dragonflydbCopilot instructionsdragonflydb/dragonfly/.github/copilot-instructions.md
Code review guidelines for GitHub copilot in this project
No other project uses it yet
The-Art-of-HackingCopilot instructionsThe-Art-of-Hacking/h4cker/.github/copilot-instructions.md
nmap` -- takes 60-120 seconds. NEVER CANCEL. Set timeout to 180+ seconds. ### Docker Security Examples - Build Docker security examples: `cd docker-and-k8s-security/docker && make build-naive` -- takes
No other project uses it yet
keepassxrebootCopilot instructionskeepassxreboot/keepassxc/.github/copilot-instructions.md
than committing wholesale .ui changes unless very simple. - Sensitive areas: `src/crypto` and `src/format` contain security-sensitive logic — avoid refactors that change algorithms without expert review. Concrete examples (where to copy
Steady3 mentions in 2 weeks
No other project uses it yet
celeryCopilot instructionscelery/celery/.github/copilot-instructions.md
b/celery/app/defaults.py @@ - serializer=Option('json'), + serializer=Option('yaml'), ``` - Why it matches: Affects compatibility with consumers/producers; security considerations for yaml. - Example comment: "Serializer default json -> yaml changes interop/security profile. Is this intended
No other project uses it yet
koodo-readerCopilot instructionskoodo-reader/koodo-reader/.github/copilot-instructions.md
Koodo Reader – Code Review Standards ## Security Critical Issues - Validate all IPC arguments from the renderer before filesystem, DB, or shell operations - Never log tokens, passwords, or full book-file paths
No other project uses it yet
MongoDBCopilot instructionsmongodb/mongo/.github/copilot-instructions.md
Copilot instructions for this repository ## Flag likely CVE / security-vulnerability fixes Commits on `master` are automatically synced to the public `mongodb/mongo` repository. A security fix that lands on `master` before
No other project uses it yet
valkey-ioCopilot instructionsvalkey-io/valkey/.github/copilot-instructions.md
Checks - **DCO:** **Flag missing** `Signed-off-by: Name ` in commits. Every commit needs it. - **Security:** If PR fixes a security vulnerability, flag it: "Security fixes should be reported privately
No other project uses it yet
daprCopilot instructionsdapr/dapr/.github/copilot-instructions.md
Placement client and service resiliency/ # Retry/circuit-breaker/timeout policies runtime/ # Main runtime initialization scheduler/ # Scheduler logic security/ # mTLS and SPIFFE sentry/ # Sentry CA service dapr/proto/ # Protobuf definitions runtime/ # Dapr runtime proto common
No other project uses it yet
temporalioCopilot instructionstemporalio/temporal/.github/copilot-instructions.md
cases, test gaps, or design concerns. Affects correctness or maintainability. Blocking. - `high` — Serious issue: security vulnerability, data loss risk, crash/panic, race condition, broken functionality, or architectural violation. Blocking. Report concrete
No other project uses it yet
jaegertracingCopilot instructionsjaegertracing/jaeger/.github/copilot-instructions.md
diff: logic errors, incorrect conditions, missing error handling, concurrency hazards, resource leaks, security regressions, data corruption. These always warrant a comment. ## What not to flag - **Style and formatting** — CI enforces
No other project uses it yet
comet-mlCopilot instructionscomet-ml/opik/.github/copilot-instructions.md
allocations - **Database Optimization**: Use proper indexes and query optimization - **Caching**: Implement appropriate caching strategies ### Security Guidelines - **Input Validation**: Validate all external inputs - **Authentication**: Implement proper authentication and authorization - **Data Protection
Steady19 mentions in 2 weeks
No other project uses it yet
dotnetCopilot instructionsdotnet/core/.github/copilot-instructions.md
link checking. External links may be slow or blocked by network restrictions. 3. **Security scanning with checkov** (takes ~38 seconds): ```bash checkov --config-file .checkov.yml --directory . --quiet ``` 4. **Format checking
No other project uses it yet
desktopCopilot instructionsdesktop/desktop/.github/copilot-instructions.md
files yarn markdownlint # Format with Prettier yarn prettier # Fix Prettier issues yarn prettier --write ``` ## Security & Quality ### Security - **Never commit secrets, passwords, or sensitive data** - **Validate and sanitize user input** - **Follow
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
