packages n8n (workflow automation tool) as a Docker container with nginx reverse proxy for secure access through Home Assistant's ingress system.
Always reference these instructions first and fallback
2204d agoReviewMountCreate a free account to mount
required contract — `ManagedBy` may
> still be emitted as an optional deploy-provenance marker.
### Security baseline + AVM mandate
Non-negotiable: HTTPS-only, TLS 1.2 minimum, no public blob, Managed Identity
over
21940d agoReviewMountCreate a free account to mount
accordprojectDeletes or force-pushesCopilot instructions
used for real-time control and status updates
- The system uses TLS certificates for secure communication
- Messages are exchanged using protobuf definitions
#### Home Assistant Integration
- The integration follows Home Assistant
21810mo agoReviewMountCreate a free account to mount
generating suggestions:
1. Prefer incremental, minimal diffs; preserve existing style and naming.
2. Surface security, correctness, and data integrity issues before micro-optimizations.
3. Encourage type safety (no `any` unless
2164mo agoReviewMountCreate a free account to mount
pull request requirements, the pull request review workflow
and output format, and the security policy. Read it before making changes or
reviewing. This file intentionally contains nothing else
2155mo agoReviewMountCreate a free account to mount
expr)` for propagating failures in call chains that return optional/expected.
4. **Security** — no `getenv()` calls inside library code (only in `main.cpp` and CLI handlers);
validate all external input (WebSocket messages
2148mo agoReviewMountCreate a free account to mount
termination condition. No pointer capture in closures without snapshot/sync.
## 3. Workspace path safety (critical: security boundary)
- Containment of workspace paths under `workspace.root` after absolute normalization; no escape symlinks.
- Issue identifiers
21132d agoReviewMountCreate a free account to mount
caller
before editing. Never simplify away input validation, error handling
that prevents data loss, security, or accessibility. Non-trivial logic
leaves one runnable check behind. A repo overrides these wholesale
2102mo agoReviewMountCreate a free account to mount
bullets. explain/teach -- only when user says "why" or "explain".
Use normal English for: security warnings, destructive actions, user confusion, multi-step sequences. Resume terse after.
## Memory routing
Session start: call
2106mo agoReviewMountCreate a free account to mount
camelCase (variables/functions/methods), UPPER_CASE (constants)
- **Testing**: Follow TDD (write tests first when fixing bugs)
- **Security**: Be extra careful - this code downloads and executes .NET installers
## Common Development Workflows
### Updating Dependencies
2093y agoReviewMountCreate a free account to mount
Balance all five pillars** - Consider Cost Optimization, Operational Excellence, Performance Efficiency, Reliability, and Security together
4. **Justify decisions** - Explain WHY a service or pattern was chosen, including tradeoffs
5. **Link
2036mo agoReviewMountCreate a free account to mount
GitHub Copilot Instructions for this Repository
## General Guidelines:
- Prioritize security, performance, and readability in code suggestions.
- Use clear and concise language.
- This project contains a Node-RED integration for Home
1983mo agoReviewMountCreate a free account to mount
Copilot review instructions
Repo-wide guidance for automated code review. Prioritize correctness and
security over style. Be specific and actionable; cite the file and line.
## GitHub Actions — credential & secret safety
19713d agoReviewMountCreate a free account to mount
CortexPrismPipes a download into a shellCopilot instructions
maintainer requested it.
- Before opening, updating, or finalizing a PR, use the pre-PR security cycle:
`docs/pre-pr-security-cycle.md`,
`.github/skills/pre-pr-security-cycle/SKILL.md`, and
`.github/prompts/pre-pr-security-cycle.prompt.md`.
- Before creating, reopening, or requesting review on a PR, satisfy
1876mo agoReviewMountCreate a free account to mount
skill files under `.github/skills/`. Avoid duplicating checklist content between this file and skills.
## Security Defaults (Always-On)
Apply secure-by-default behavior across all code generation, changes, and reviews, regardless
1777mo agoReviewMountCreate a free account to mount