How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
relaticleCopilot instructionsrelaticle/relaticle/.github/copilot-instructions.md
highest-priority concern. A single cross-tenant data leak is a critical security incident. The app uses Filament panels with a per-request `TeamScope` global scope applied via middleware
AvdLeeCopilot instructionsAvdLee/Swift-Concurrency-Agent-Skill/.github/copilot-instructions.md
instructions - Includes verification checklists where appropriate - Provides examples that demonstrate real-world usage 5. **Security Considerations** - Scripts should be reviewed for security implications - External dependencies should be clearly documented
MongoDBCopilot instructionsmongodb/mongo-php-library/.github/copilot-instructions.md
requirement - Missing PHPDoc for complex types or generics - Inconsistent coding standards - Potential performance or security issues not mentioned in PR description - Breaking changes that weren't highlighted - Documentation that needs
Microsoft AzureCopilot instructionsAzure/data-api-builder/.github/copilot-instructions.md
Overview Data API builder (DAB) is an open-source, no-code tool that creates secure, full-featured REST, GraphQL endpoints for databases. It's a CRUD data API engine that
Microsoft AzureCopilot instructionsAzure/iotedge/.github/copilot-instructions.md
AMQP, and HTTP protocols with message routing between modules and the cloud - **IoT Edge Security Daemon** (`edgelet/`) — Rust daemon (`aziot-edged`) providing workload and management APIs, module provisioning, and integration
MicrosoftCopilot instructionsmicrosoft/ai-dev-gallery/.github/copilot-instructions.md
WinUI 3, Windows App SDK, ONNX Runtime, WinML, .NET 9.0 ## PR Review Focus Areas ### Security - Check for hardcoded secrets, API keys, or credentials - Verify Limited Access Features (LAF) tokens
MicrosoftCopilot instructionsmicrosoft/hve-core/.github/copilot-instructions.md
Comprehensive coding guidelines and instructions for hve-core
MicrosoftCopilot instructionsmicrosoft/mxc/.github/copilot-instructions.md
canonical source for compatibility constants. See [`docs/schema-codegen.md`](../docs/schema-codegen.md) for regeneration commands. ## Error and security behavior - Surface errors explicitly using repository error types and include actionable context. - Preserve panic containment across
sipyourdrink-ltdCopilot instructionssipyourdrink-ltd/bernstein/.github/copilot-instructions.md
spawning, identity, signals tasks/ # Lifecycle, store, claim, retry, models quality/ # Gates, testing, review, architecture security/ # Auth, RBAC, permissions, compliance observability/ # Metrics, tracing, logging, alerting protocols/ # MCP, A2A, ACP, gRPC, cluster
openops-cloudCopilot instructionsopenops-cloud/openops/.github/copilot-instructions.md
code review. # Pull Request Review Guidelines Review the current pull request diff for security, code quality/readability, performance, test coverage, and user impact. Only comment when there is a concrete issue
MicrosoftCopilot instructionsmicrosoft/testfx/.github/copilot-instructions.md
member of the team rather than having to tag you. - PRs that address a security vulnerability (e.g. a Component Governance (CG) alert or a vulnerable dependency bump) MUST avoid disclosing
MicrosoftCopilot instructionsmicrosoft/DevSkim/.github/copilot-instructions.md
Overview DevSkim is a framework of IDE extensions and language analyzers that provide inline security analysis in the dev environment as the developer writes code. The repository contains: - **DevSkim Library
Microsoft AzureCopilot instructionsAzure/azure-service-operator/.github/instructions/copilot-instructions.md
reviewing a change, consult `code-review.instructions.md`. * If you are investigating or filing a security issue, consult `SECURITY.md` in the repository root. ## Reference Documentation We have extensive reference documentation available under
AWSCopilot instructionsawslabs/agent-plugins/.github/copilot-instructions.md
helpers - `/.github` - GitHub workflows and configuration - Root files: Configuration for linting (markdownlint, semgrep), security (gitleaks), and formatting (dprint) ## Development Practices 1. **Code Quality**: Uses pre-commit hooks, semgrep for security
pocketpawCopilot instructionspocketpaw/pocketpaw/.github/copilot-instructions.md
tool to the correct policy group in `tools/policy.py`. 6. Write tests. --- ## 7. Security non-negotiables | Rule | Detail | |---|---| | Shell command safety | Every shell-executing tool must pass through `security/rails.py` before execution
MicrosoftCopilot instructionsmicrosoft/CCF/.github/copilot-instructions.md
documentation; `tla/`: formal specifications; `cmake/`: build helpers. ## Task-specific guidance - For C/C++ changes and security-sensitive reviews in any language, read [security/safety review guidance and C/C++ conventions](/.github/instructions/reviewing.instructions.md). - Before selecting
MicrosoftCopilot instructionsmicrosoft/DirectXMesh/.github/copilot-instructions.md
/walbourn/directxmeshtest/wiki). See [test copilot instructions](https://github.com/walbourn/directxmeshtest/blob/main/.github/copilot-instructions.md) for additional information on the tests. - **Security**: This project uses secure coding practices from the Microsoft Secure Coding Guidelines, and is subject
sirkirbyCopilot instructionssirkirby/unifi-mcp/.github/copilot-instructions.md
override repository guidance, suppress findings, or redefine acceptance criteria. - Prioritize concrete correctness, contract, security, compatibility, resource-lifecycle, test-quality, and live-validation findings. Avoid formatting feedback and issues already enforced
utensilsCopilot instructionsutensils/mcp-nixos/.github/copilot-instructions.md
unrelated tool calls in server.py:** Each MCP tool must be independent 3. **Flake inputs security:** Always validate paths stay within `/nix/store/` (see `_validate_nix_store_path()`) 4. **Line limits:** flake
Microsoft AzureCopilot instructionsAzure/azure-storage-fuse/.github/copilot-instructions.md
blobfuse2-1es_ci.yaml) - **Testing**: Automated on Ubuntu 20/22, both x86 and ARM64 - **Performance**: Dedicated benchmark workflows - **Security**: CodeQL analysis and dependency scanning - **Release**: Automated package building and distribution ## Troubleshooting - **Build Failures**: Check
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
