How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
ruilisiCopilot instructionsruilisi/lsbot/.github/copilot-instructions.md
current branch compared to main. Provide structured feedback on correctness, design, performance, security, and test coverage. ### /github - GitHub CLI Reference Use the `gh` CLI to interact with GitHub. Always specify
MicrosoftCopilot instructionsmicrosoft/regorus/.github/copilot-instructions.md
policy languages via `src/languages/`. It is used in **production at scale** where **correctness is security-critical** — a bug in policy evaluation can mean `allow` when the answer should be `deny
ucsandmanCopilot instructionsucsandman/DashClaw/.github/copilot-instructions.md
production without it doing something expensive, irreversible, or embarrassing."* - **Secondary: governance / compliance / security stakeholders.** They rarely write code but need to audit agent behavior, approve risky actions, and produce evidence
AvdLeeCopilot instructionsAvdLee/Core-Data-Agent-Skill/.github/copilot-instructions.md
examples for clarity - Addresses thread safety with NSManagedObjectID - Considers performance implications 5. **Security Considerations** - Scripts should be reviewed for security implications - External dependencies should be clearly documented - No malicious patterns
Green-PTCopilot instructionsGreen-PT/honey-for-devs/.github/copilot-instructions.md
boundaries (user input, network, files, env). - **Error handling** that prevents data loss or corruption. - **Security** — auth checks, escaping, secrets handling. - **Accessibility basics** — labels, roles, keyboard paths. - **Visual/UX design when
MicrosoftCopilot instructionsmicrosoft/libHttpClient/.github/copilot-instructions.md
compilation via `#if HC_PLATFORM == HC_PLATFORM_*` - Compiler warnings: Level 4, warnings as errors - Security: SDL checks, Control Flow Guard (`/guard:cf`), ASLR ## Build Commands ### Windows (MSBuild) ```powershell # VS2022 — Win32
DitriXNewCopilot instructionsDitriXNew/EDT-MCP/.github/copilot-instructions.md
attempts, architectural decisions 🎯 Select Options - Present 2-5 choices for decisions 📝 Review Code - Security-sensitive or complex implementations ⚠️ Confirm Action - Before deletions, schema changes, breaking changes 🖼️ Read Image - Analyze mockups
shangyankejiCopilot instructionsshangyankeji/super-dev/.github/copilot-instructions.md
architecture.md`, then realign tasks and implementation before continuing. - If the user requests quality or security remediation, first fix the issues, rerun quality gate plus `super-dev release proof-pack
joshuadavidthomasCopilot instructionsjoshuadavidthomas/opencode-agent-skills/.github/copilot-instructions.md
Done\" --json` 6. **Sync**: `bd sync` (flushes changes to git immediately) ### Priorities - `0` - Critical (security, data loss, broken builds) - `1` - High (major features, important bugs) - `2` - Medium (default, nice
Microsoft AzureCopilot instructionsAzure/awesome-azd/.github/copilot-instructions.md
local) - Clear feature list highlighting AI capabilities - CI/CD pipeline setup guidance using azd commands **Security Recommended Practices:** - Use keyless authentication (Managed Identity preferred or Key Vault) instead of API keys
Microsoft AzureCopilot instructionsAzure/git-ape/.github/copilot-instructions.md
destroy`:** - Required reviewers (recommended — destructive action) - Deployment branches: `main` only (triggered on PR merge) ## Security Baseline - Enable HTTPS-only for all web-facing resources - **Always use managed identities** — never
Microsoft AzureCopilot instructionsAzure/AppConfiguration/.github/copilot-instructions.md
newest first) - Each entry includes version number, date, and a bulleted list of changes ## Security - Report vulnerabilities through MSRC (https://msrc.microsoft.com/create-report), never via public issues - Never commit secrets, connection
powerfooICopilot instructionspowerfooI/herdr-studio/.github/copilot-instructions.md
over new abstractions; watch for missing effect cleanup and stale closures over socket state. - Security: the server runs locally by default but can bind to a non-loopback address
MicrosoftCopilot instructionsmicrosoft/Sico/.github/copilot-instructions.md
when frontend source changed and `frontend/package.json` exists: `cd frontend && pnpm build && pnpm lint`. ## Authentication & security notes - User/admin HTTP APIs use **JWT + Casbin** RBAC. - Sandbox client endpoints use a separate **HMAC
MicrosoftCopilot instructionsmicrosoft/discovery/utilities/supercomputer-cli/.github/copilot-instructions.md
size - Copy only necessary files (use .dockerignore) - Set PYTHONUNBUFFERED=1 for proper log streaming ### Security Practices - Never hardcode secrets or credentials - Support multiple authentication methods (managed identity, service principal
bx33661Copilot instructionsbx33661/Wireshark-MCP/.github/copilot-instructions.md
GitHub Copilot Repository Instructions For packet capture, protocol analysis, network security monitoring, incident response, and troubleshooting tasks, prefer the canonical project skill in `skills/wireshark-traffic-analysis/`. Use the skill to: - start with
MicrosoftCopilot instructionsmicrosoft/AzureTRE/.github/copilot-instructions.md
Trusted Research Environments on Azure. It enables authorized users to deploy and configure secure workspaces and researcher tooling without a dependency on IT teams. Trusted Research Environments (TREs) enable organizations
MicrosoftCopilot instructionsmicrosoft/sarif-sdk/.github/copilot-instructions.md
visual structure `GH` + `Az` + `DO` is preserved deliberately to read as "GitHub Advanced Security for Azure DevOps". Every type, file, namespace, resource key, and prose mention uses exactly `GHAzDO
Conceptual-MachinesCopilot instructionsConceptual-Machines/magda-core/.github/copilot-instructions.md
crash/data-loss/security issues with evidence remain **Don't merge when**: - Reproducible crash, data loss, or security vulnerability exists with concrete evidence - Required tests are missing for witnessed critical issues ## Examples
timothywarner-orgCopilot instructionstimothywarner-org/claude-code/.github/copilot-instructions.md
servers and TypeScript utilities (`utils/`). - `scripts/`: TypeScript and shell utility scripts for setup, security, and documentation. - `.mcp.json`: Project-scoped MCP servers the CLI reads on startup (`microsoft-learn`, `oreilly-july20
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
