Kyverno is a Kubernetes-native policy engine for security, compliance, and governance via admission control and
background scans. This file is instructions for *how* to review here — facts about specific
No other project uses it yet
8.3k7mo agoReviewMountCreate a free account to mount
with enough context for callers to inspect and operators to diagnose?
5. **Security**: Is untrusted input validated at the trust boundary? Do secrets stay out of logs, errors, and responses
No other project uses it yet
8.3k4mo agoReviewMountCreate a free account to mount
that explain the risk and suggest a concrete fix or follow-up.
- Flag correctness, security, compatibility, or maintainability issues over minor style preferences.
- Avoid low-value style comments unless they
No other project uses it yet
7.8k11d agoReviewMountCreate a free account to mount
include `Fixes #NN` in commit messages.
## Review Priorities
- Prioritize correctness, behavior regressions, security risks, and missing tests.
- Keep findings concrete and actionable, and include file and line references when possible
No other project uses it yet
7.6k14mo agoReviewMountCreate a free account to mount
suggest refactors, performance improvements, or alternative implementations.
- Do not flag potential bugs, security issues, or logic errors as part of a review.
- Do not provide summaries or overviews
No other project uses it yet
7.6k2y agoReviewMountCreate a free account to mount
available via npm and github. If not report a warning.
5. Perform a security audit especially regarding supply chain attacks. To clarify: Malicious packages are inacceptable, even severe security issues
No other project uses it yet
7.5k26d agoReviewMountCreate a free account to mount
Overview
This is the main **Project Calico** repository - an open-source container networking and security solution. Calico provides data plane choice (eBPF, standard Linux, Windows, VPP), advanced security features
No other project uses it yet
7.4k7d agoReviewMountCreate a free account to mount
ROLE: NETALERTX ARCHITECT & STRICT CODE AUDITOR
You are a cynical Security Engineer and Core Maintainer of NetAlertX. Your goal is to deliver verified, secure, and production-ready solutions.
### MANDATORY BEHAVIORAL
1 project uses a version of this
7.4k31d agoReviewMountCreate a free account to mount
copilot-instructions/javascript-frontend.md)
- [TypeScript & React](copilot-instructions/typescript-react.md)
- [Testing Best Practices](copilot-instructions/testing.md)
- [Security & Validation](copilot-instructions/security.md)
---
## Critical Partner Mindset
Do not affirm my statements or assume
No other project uses it yet
7.1k51d agoReviewMountCreate a free account to mount
conventions outlined below to ensure consistency and maintainability. Pay particular attention to the [Security Checks](#security-checks) section.
## General Conventions
- All code must adhere to the standards defined
No other project uses it yet
7.1k5y agoReviewMountCreate a free account to mount
text
rules
overwrite
config
subconverter
shell
substore
readme
wiki
docs
validation
pages
sync
deps
security
cdn
workflow
repo
```
Use these spellings consistently.
Do not invent singular, plural, or synonymous variants
No other project uses it yet
6.8k3mo agoReviewMountCreate a free account to mount
system (3.14+)
- Google Test for unit testing
- Support for multiple compilers (MSVC, GCC, Clang)
## Security Considerations
- Bounds checking is a core principle - enforce it consistently
- Design for safety while minimizing
No other project uses it yet
6.7k3mo agoReviewMountCreate a free account to mount
already-imported ones; new dependencies must be GPLv3+ compatible.
- Always ensure generated code is secure and free from vulnerabilities.
- Do not ask clarification questions unless a real technical choice must
No other project uses it yet
6.6k10mo agoReviewMountCreate a free account to mount
packages or modules that change the repo structure
- Cross-cutting changes spanning 3+ packages
- Security model changes (identity, trust, policy engine)
- Breaking API changes to public interfaces
- New framework integrations
No other project uses it yet
6.5k55d agoReviewMountCreate a free account to mount
DOMAIN=...` or
`make verify PROFILE=...`; use `make harness-check` for harness/workflow edits.
Prioritize correctness, security, public contracts, missing behavior tests, and
real dependency boundaries. Numeric size metrics are advisory: recommend
No other project uses it yet
6.4k36d agoReviewMountCreate a free account to mount