How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
gitbutlerappDeletes or force-pushesCopilot instructionsgitbutlerapp/gitbutler/.github/copilot-instructions.md
package references 8. **Test on target platform** if making platform-specific changes 9. **Security**: Check dependencies for vulnerabilities before adding them 10. **Code marked for refactoring**: Be extra careful with
CaldisCopilot instructionsCaldis/Mos/.github/copilot-instructions.md
fixes and clear verification evidence before claiming success. - Human confirmation before release, signing, notarization, security-report, or real-device actions
No other project uses it yet
vitessioCopilot instructionsvitessio/vitess/.github/copilot-instructions.md
Code Review Instructions ## Priority Only comment on issues that affect correctness, security, or performance. Do NOT comment on: style preferences, minor naming conventions, formatting, or issues already enforced
No other project uses it yet
eggjsCopilot instructionseggjs/egg/.github/copilot-instructions.md
plugin system, conventions over configuration, and enterprise-grade features like clustering, logging, and security. This is a **utoo monorepo** with multiple packages using utoo workspaces and catalog mode for centralized
No other project uses it yet
dotnetCopilot instructionsdotnet/runtime/.github/copilot-instructions.md
change-doc` skill. - **Merge to main first, then `/backport`.** Servicing backports are limited to security bugs, regressions, and reliability issues, and should be small targeted fixes rather than refactorings
No other project uses it yet
apacheCopilot instructionsapache/arrow/.github/copilot-instructions.md
praising the code unless it's exceptional. - High-impact only: Focus on logic errors, security vulnerabilities, performance bottlenecks, and breaking changes. - Skip the Obvious: Do not describe what the code
1 project uses a version of this
doocsCopilot instructionsdoocs/md/.github/copilot-instructions.md
plain semver there, not `catalog:`. - Prettier is pinned to **2.8.8**. Do not remove security `overrides` unless upstream fixed the CVE. - If a patched dependency is upgraded, update the matching file
No other project uses it yet
InsForgeCopilot instructionsInsForge/InsForge/.github/copilot-instructions.md
integration tests for API endpoints - Maintain test coverage above 70% - Mock external dependencies appropriately ## Security Considerations - Never commit secrets or API keys - Use environment variables for configuration - Implement proper authentication
Steady7 mentions in 2 weeks
No other project uses it yet
codecentricCopilot instructionscodecentric/spring-boot-admin/.github/copilot-instructions.md
repository - Config server connection refused: Normal warning, config server is optional in dev mode - Security warnings: Use `insecure` profile for development to bypass authentication ## Development Workflow 1. **Setup**: Configure Node.js
No other project uses it yet
StarRocksCopilot instructionsStarRocks/starrocks/.github/copilot-instructions.md
using Cost-Based Optimizer (CBO) - Manage cluster metadata and coordination - Handle user sessions and security 📋 **Note:** See `fe/.cursorrules` for detailed frontend component breakdown ### Java Extensions (java-extensions/) - Java External connectivity
nasaCopilot instructionsnasa/fprime/.github/copilot-instructions.md
github/agents/_shared/review-contract.md`](agents/_shared/review-contract.md)) and the agent registry ([`.github/agents/_shared/agent-registry.yml`](agents/_shared/agent-registry.yml)), which lists the ten reviewer agents (security, supply chain / runner safety, F Prime C/C++ design, stale documentation, design, architecture, test quality, correctness
Steady5 mentions in 2 weeks
No other project uses it yet
WordPressCopilot instructionsWordPress/gutenberg/.github/copilot-instructions.md
guidelines When reviewing pull requests: - Only comment on semantically meaningful issues: bugs, incorrect logic, security problems, accessibility regressions, or API contract violations. - Skip style, formatting, naming, and whitespace observations — these
No other project uses it yet
MicrosoftCopilot instructionsmicrosoft/presidio/.github/copilot-instructions.md
paramount.** This is a PII detection and anonymization system used in sensitive contexts; security and correctness are non-negotiable. - **Accuracy first**: false negatives (missed PII) and false positives (incorrect detections
apereoCopilot instructionsapereo/cas/.github/copilot-instructions.md
Name * @since 8.0.0 */ @RequiresModule(name = "cas-server-support-ldap") public class LdapAuthenticationHandler implements AuthenticationHandler { // ... } ``` ## Security Considerations **CRITICAL**: Always review AI-generated changes in these areas: - Authentication flows (login, logout
No other project uses it yet
data-privacy-stackCopilot instructionsdata-privacy-stack/presidio/.github/copilot-instructions.md
paramount.** This is a PII detection and anonymization system used in sensitive contexts; security and correctness are non-negotiable. - **Accuracy first**: false negatives (missed PII) and false positives (incorrect detections
1 project uses a version of this
bunkerityCopilot instructionsbunkerity/bunkerweb/.github/copilot-instructions.md
built on top of NGINX, with a modular, plugin-based architecture. - Major components: core (security logic), scheduler (configuration and job orchestration), web UI (management), plugin system (feature extension), and integrations
No other project uses it yet
mRemoteNGCopilot instructionsmRemoteNG/mRemoteNG/.github/copilot-instructions.md
Container/`: Container/folder node implementations - `Credential/`: Credential storage and repositories - `Language/`: Localization resource files (.resx) - `Security/`: Authentication, encryption, and password management - `Tree/`: Connection tree UI and management - `UI/`: User interface components
No other project uses it yet
openvinotoolkitCopilot instructionsopenvinotoolkit/openvino/.github/copilot-instructions.md
Testing and coverage](../docs/dev/test_coverage.md) - [Debug capabilities](../docs/dev/debug_capabilities.md) - [CI overview](../docs/dev/ci/github_actions/overview.md) - [Smart CI](../docs/dev/ci/github_actions/smart_ci.md) - [CI security](../docs/dev/ci/github_actions/security.md) - [Core documentation](../src/core/README.md) - [Frontend documentation](../src/frontends/README.md) - [Plugin documentation](../src/plugins/README.md) - [Python bindings](../src/bindings/python/README.md) - [C bindings
No other project uses it yet
roboflowCopilot instructionsroboflow/rf-detr/.github/copilot-instructions.md
Practices:** - Make minimal, surgical changes - avoid over-engineering - Use existing patterns and libraries - Write secure code - avoid injection vulnerabilities (XSS, SQL injection, command injection) - Follow Python ML development best practices
activeadminCopilot instructionsactiveadmin/activeadmin/.github/copilot-instructions.md
adding user-facing features. 5. **Internationalization**: Support i18n - translation files are in `config/locales/` 6. **Security**: This is an administration framework so be extra cautious with security implications. 7. **Code Quality
No other project uses it yet
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
