Azure AI integrations (Azure OpenAI, Azure AI Search, etc.), follow official SDK and security guidelines
7. Use configuration via `appsettings.json` and dependency injection for new .NET code
8. Keep code
1695mo agoReviewMountCreate a free account to mount
Require before-and-after screenshots for any
user-visible interface change. Review correctness, regressions, security,
product fit, tests, documentation, and unnecessary dependencies. Do not approve
or recommend merging code that
16910d agoReviewMountCreate a free account to mount
correctness, clarity, reliability, and maintainability.
## Quick Checklist
- [ ] Code should not have any critical security flaws or bugs
- [ ] All new or changed logic is covered by appropriate automated tests.
- [ ] Test names
1664mo agoReviewMountCreate a free account to mount
next run.
---
## SQL Database project conventions
- Project file: `src/SQL_FMD_FRAMEWORK.SQLDatabase/SQL_FMD_FRAMEWORK.sqlproj`
- Schema folders: `integration/`, `execution/`, `logging/`, `Security/`
- Each object lives in its own `.sql` file named after the object.
- Stored procedures
16521mo agoReviewMountCreate a free account to mount
changelog in its own repository.)
- Format: **Keep a Changelog** sections (`Added`, `Changed`, `Fixed`, `Removed`, `Security`).
- Entries should be **user-visible** and avoid commit hashes/file names.
- If details are ambiguous, prefer
16215mo agoReviewMountCreate a free account to mount
Commit messages: Follow the `Commit messages` rule in `AGENTS.md` (Conventional Commits, ` ( ): `, lowercase imperative summary).
- Security: Never suggest or commit secrets, API keys, or other personal data. Private dotfiles are managed
1575d agoReviewMountCreate a free account to mount
GitHub Copilot Instructions - OWASP ASVS 5.0 Secure Coding Standards
You are an AI programming assistant that helps developers write secure code following OWASP Application Security Verification Standard (ASVS) 5.0 requirements
1563y agoReviewMountCreate a free account to mount
This repo contains instruction files for using and conducting security reviews, do not confuse this `copilot-instructions.md` from other copilot-instructions files existing in this workspace.
For every change
15343d agoReviewMountCreate a free account to mount
primary targets)
- **AI integration** is a core feature - be mindful of Ollama API calls
- **Security**: Handle shell command execution carefully to prevent injection
- **Performance**: Keep the UI responsive; use async
14918mo agoReviewMountCreate a free account to mount
GitHub Actions workflows. It defines the
review dimensions in priority order — correctness, reliability/SRE, security,
Azure/SAP domain rules, performance, testing coverage, maintainability — along
with the evidence bar and the known false
1482mo agoReviewMountCreate a free account to mount
functionalities such as,
e.g., Entra ID authentication and DiskANN indexing algorithm, which help improve
security and performance when working with large datasets.
## Tooling
For this project
1472mo agoReviewMountCreate a free account to mount
tasks and avoid manual interventions.
- Write modular, reusable CI/CD pipelines.
- Use containerized applications with secure registries.
- Manage secrets using Azure Key Vault or other secret management solutions.
- Build resilient systems
14618mo agoReviewMountCreate a free account to mount
MSTest.
- Use Moq or NSubstitute for mocking dependencies.
- Implement integration tests for API endpoints.
## Security
- Use Authentication and Authorization middleware.
- Implement JWT authentication for stateless API authentication.
- Use HTTPS
14618mo agoReviewMountCreate a free account to mount