How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
canonicalCopilot instructionscanonical/lxd/.github/copilot-instructions.md
Copilot Instructions LXD is a modern, secure system container and virtual machine manager. LXD requires the Go version listed in `doc/requirements.md` or higher and is only tested with the Golang
Steady11 mentions in 2 weeks
No other project uses it yet
hyperlight-devCopilot instructionshyperlight-dev/hyperlight/.github/copilot-instructions.md
weight these for Hyperlight: * Correctness: edge cases, error paths, broken invariants. * Security boundary: the VMM/guest split, paging, and syscall surface. Treat all guest input as untrusted and watch for sandbox
No other project uses it yet
dotnetCopilot instructionsdotnet/docs/.github/copilot-instructions.md
tokenizer" instead of "Cache and reuse the tokenizer for better performance". Write "To improve security, use HTTPS" instead of "Use HTTPS to improve security". ## Special Cases ### Breaking Changes - Include directions
MicrosoftCopilot instructionsmicrosoft/PyRIT/.github/copilot-instructions.md
PyRIT (Python Risk Identification Tool for generative AI) is an open-source framework for security professionals to proactively identify risks in generative AI systems. ## Architecture PyRIT uses a modular pluggable
No other project uses it yet
aquasecurityCopilot instructionsaquasecurity/tracee/.github/copilot-instructions.md
Copilot Instructions for Tracee ## Repository Overview Tracee is a runtime security and observability tool that uses eBPF technology to tap into system activity and expose events ranging from factual system
Model Context ProtocolCopilot instructionsmodelcontextprotocol/csharp-sdk/.github/copilot-instructions.md
package directories - Use `///` XML comments for all public APIs - Include ` ` sections for detailed explanations ## Security - Never commit secrets or API keys - Use environment variables for sensitive configuration - Support authentication mechanisms
No other project uses it yet
IvanMurzakCopilot instructionsIvanMurzak/Unity-MCP/.github/copilot-instructions.md
/Packages/com.ivanmurzak.unity.mcp/package.json`. ## Integration Points - **Communication**: SignalR between Server and Plugin. - **Dependencies**: OpenUPM for external packages. ## Security - **Server Transport**: Configurable via `--client-transport` (`stdio` or `streamableHttp
Steady7 mentions in 2 weeks
No other project uses it yet
kubernetes-sigsCopilot instructionskubernetes-sigs/agent-sandbox/.github/copilot-instructions.md
substantive findings tied to lines the PR actually modifies — logic bugs, concurrency issues, security vulnerabilities, controller-runtime misuse, API contract breaks, and missing tests for new behavior. - Do NOT flag
No other project uses it yet
alextselegidisCopilot instructionsalextselegidis/easyappointments/.github/copilot-instructions.md
consistency with existing patterns over introducing new ones. * Keep code clean, readable, and maintainable. ## Security Best Practices * Never introduce vulnerabilities such as: * SQL injection * XSS (Cross-Site Scripting) * CSRF issues
dvorkaCopilot instructionsdvorka/hstr/.github/copilot-instructions.md
changes uncommitted in the working tree (staging is fine) for the maintainer to review. ## Security instructions - ALWAYS follow security best practices. - NEVER log form data that may contain sensitive information
MicrosoftCopilot instructionsmicrosoft/FLAML/.github/copilot-instructions.md
pre-commit-config.yaml`: Pre-commit hook configuration - Backward compatibility: FLAML is a library with external users ### Security Considerations - Never commit secrets or API keys - Be careful with external data sources in tests
Steady5 mentions in 2 weeks
No other project uses it yet
sshnetCopilot instructionssshnet/SSH.NET/.github/copilot-instructions.md
proxy support (SOCKS4/5, HTTP), key exchange ├── Messages/ # SSH protocol message types │ ├── Transport/ │ ├── Authentication/ │ └── Connection/ ├── Security/ # Algorithms, key-exchange, cryptography wrappers │ └── Cryptography/ # Ciphers, signatures, key types ├── Sftp/ # SFTP session, requests, responses
No other project uses it yet
MicrosoftCopilot instructionsmicrosoft/ApplicationInspector/.github/copilot-instructions.md
Structure Rules are JSON files located in `AppInspector/rules/default/` organized by category: - `cryptography/` - Cryptographic operations - `security_feature/` - Security-related features (authentication, authorization, etc.) - `data_handling/` - Database, serialization, deserialization - `os/` - Operating system
MongoDBCopilot instructionsmongodb/mongo-python-driver/.github/copilot-instructions.md
When reviewing code, focus on: ## Coding Standards - All guidelines in [CODING-STANDARDS.md](../CODING-STANDARDS.md). ## Security Critical Issues - Check for hardcoded secrets, API keys, or credentials. - Check for instances of potential method call
EasyCorpCopilot instructionsEasyCorp/EasyAdminBundle/.github/copilot-instructions.md
party bundle for Symfony applications - This project is used to create admin backends - Follow secure coding practices to prevent common web vulnerabilities (XSS, CSRF, injections, auth bypass, open redirects
Steady5 mentions in 2 weeks
No other project uses it yet
kubeflowCopilot instructionskubeflow/pipelines/.github/copilot-instructions.md
Make sure that the PR description is clear. - Identify design flaws, uneccessary redundancy, and security issues introduced by the PR. - Provide an estimate about whether
abhi1693Reads credentialsCopilot instructionsabhi1693/openclaw-mission-control/.github/copilot-instructions.md
check` or targeted commands), linked issue, and screenshots/logs when UI or operator workflow changes. ## Security & Configuration Tips - Never commit secrets. Copy from `.env.example` and keep real values in local
thomasnordquistReads credentialsCopilot instructionsthomasnordquist/MQTT-Explorer/.github/copilot-instructions.md
dist/src/server.js`, `app/build/*.js`, `app/build/index.html` ## Debugging Browser Mode **DevTools checks:** - Console: JavaScript errors, CSP errors (security headers), WebSocket issues - Network: Static asset loading, WebSocket status, API auth **Common issues:** - **Blank page/CSP
kumahqCopilot instructionskumahq/kuma/.github/copilot-instructions.md
Kuma Service Mesh ## Overview CNCF service mesh (Envoy-based) for K8s/VMs. L4-L7 connectivity, security, observability, multi-zone/multi-mesh. **Tech Stack:** Go 1.23+, Envoy, Kubernetes/VMs, Ginkgo/Gomega, protobuf, mise **Purpose:** Universal
corazawafCopilot instructionscorazawaf/coraza/.github/copilot-instructions.md
navigation, testing policy and coverage expectations, Architecture Decision Records, pull request requirements and the security policy. Read it before making changes. This file intentionally contains nothing else
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
