How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
MicrosoftCopilot instructionsmicrosoft/github-copilot-vibe-coding-workshop/localisation/es-es/docs/custom-instructions/java/copilot-instructions.md
Implementa indexación apropiada de base de datos y optimización de consultas. ## Seguridad - Implementa Spring Security para autenticación y autorización. - Usa codificación apropiada de contraseñas (ej., BCrypt). - Implementa configuración CORS cuando
MicrosoftCopilot instructionsmicrosoft/github-copilot-vibe-coding-workshop/localisation/fr-fr/docs/custom-instructions/java/copilot-instructions.md
indexation de base de données appropriée et l'optimisation des requêtes. ## Sécurité - Implémentez Spring Security pour l'authentification et l'autorisation. - Utilisez un encodage de mot de passe approprié
MicrosoftCopilot instructionsmicrosoft/github-copilot-vibe-coding-workshop/localisation/pt-br/docs/custom-instructions/java/copilot-instructions.md
Implemente indexação adequada de banco de dados e otimização de consultas. ## Segurança - Implemente Spring Security para autenticação e autorização. - Use codificação adequada de senha (ex: BCrypt). - Implemente configuração CORS quando
MicrosoftCopilot instructionsmicrosoft/github-copilot-vibe-coding-workshop/localisation/zh-cn/docs/custom-instructions/java/copilot-instructions.md
DataJpaTest 进行存储库层测试。 ## 性能和可扩展性 - 使用 Spring Cache 抽象实现缓存策略。 - 使用 @Async 进行非阻塞操作的异步处理。 - 实现适当的数据库索引和查询优化。 ## 安全性 - 实现 Spring Security 进行身份验证和授权。 - 使用适当的密码编码（例如，BCrypt）。 - 必要时实现 CORS 配置。 ## 日志记录和监控 - 使用 SLF4J 和 Logback 进行日志记录。 - 实现适当的日志级别（ERROR
Microsoft AzureCopilot instructionsAzure/azure-webpubsub/.github/copilot-instructions.md
require **one approving review**. - The only **required** status checks are `license/cla` and `GitGuardian Security Checks`. Every other check is advisory and does not block merge — but do not merge past
LangChainCopilot instructionslangchain-ai/langchain-azure/libs/azure-postgresql/.github/copilot-instructions.md
functionalities such as, e.g., Entra ID authentication and DiskANN indexing algorithm, which help improve security and performance when working with large datasets. ## Tooling For this project
Microsoft AzureCopilot instructionsAzure/sap-automation/.github/copilot-instructions.md
GitHub Actions workflows. It defines the review dimensions in priority order — correctness, reliability/SRE, security, Azure/SAP domain rules, performance, testing coverage, maintainability — along with the evidence bar and the known false
Microsoft AzureCopilot instructionsAzure/aks-mcp/.github/copilot-instructions.md
layer - **Resource Handlers**: `internal/azure/resourcehandlers/` - Handlers for Azure resource operations (VNet, NSG, Route Tables, Subnets) - **Security**: `internal/security/` - Access level validation and security controls - **Tools**: `internal/tools/` - MCP tool adapters and interfaces
jasonsuhariCopilot instructionsjasonsuhari/gridbash/.github/copilot-instructions.md
regression tests for behavior that can be exercised deterministically. Use these severities: - `P0`: immediate security compromise, destructive data loss, or universally broken release. - `P1`: likely user-facing defect, hang, major
AndrewAltimitCopilot instructionsAndrewAltimit/template-repo/.github/copilot-instructions.md
Review Monitor** - Automated PR review response and fixes As the PR reviewer, focus on security, containers, and project standards. ## Core Design Principles ### 1. Container-First Philosophy - **Everything runs in Docker
n1byn1ktCopilot instructionsn1byn1kt/apitap/.github/copilot-instructions.md
JSON, but auth secrets must never be stored there; auth stays in encrypted storage. - **Security checks are part of normal flow:** preserve SSRF validation, header filtering, DNS/redirect checks during import
MicrosoftCopilot instructionsmicrosoft/physical-ai-toolchain/.github/copilot-instructions.md
Required general instructions for entire codebase and project
canonicalCopilot instructionscanonical/workshop/.github/copilot-instructions.md
release.yaml` — Builds release snaps + generates CLI reference PR - `fixup.yaml` — Commit message format validation - `scanning.yml` — Security scanning - `markdown-style-checks.yml` — Markdown linting - `build-deps.yaml` — Build dependencies check - `lxd-candidate-check.yaml` — Checks LXD candidate channel - `staging.yaml` — Rejects
MicrosoftCopilot instructionsmicrosoft/AntiSSRF/.github/copilot-instructions.md
coding assistant AI that **follows the company’s Security Development Lifecycle (SDL) guidelines** for secure coding. **Always apply the following practices when generating source code:** - **Use approved frameworks & libraries:** Leverage
Prism-ShadowCopilot instructionsPrism-Shadow/agenthub/.github/copilot-instructions.md
authenticate with the respective AI model providers. Make sure to handle these credentials securely and never log or expose them in test output
MicrosoftCopilot instructionsmicrosoft/Agent365-Samples/.github/copilot-instructions.md
Rule 2 (Copyright headers) - Apply all three rules together when reviewing sample code - Prioritize security checks (no secrets) above all other validations
MicrosoftCopilot instructionsmicrosoft/PromptKit/.github/copilot-instructions.md
tasks (anti-hallucination, self-verification, operational-constraints) - **`analysis/`** — Domain/language-specific checks (memory-safety-c, security-vulnerability). Language-specific protocols are separate files, not conditional blocks. - **`reasoning/`** — Systematic reasoning approaches (root-cause
javiarmestoCopilot instructionsjaviarmesto/ALDC-AL-Development-Collection/.github/copilot-instructions.md
Event subscribers, publishers, handled pattern | al-developer, al-architect | | `skill-permissions` | Permission sets, XLIFF, security | al-developer | | `skill-pages` | Page types, FastTabs, actions, dynamic UI | al-developer | | `skill-migrate
javiarmestoCopilot instructionsjaviarmesto/ALDC-AL-Development-Collection/instructions/copilot-instructions.md
Event subscribers, publishers, handled pattern | al-developer, al-architect | | `skill-permissions` | Permission sets, XLIFF, security | al-developer | | `skill-pages` | Page types, FastTabs, actions, dynamic UI | al-developer | | `skill-migrate
harnessCopilot instructionsharness/harness-skills/.github/copilot-instructions.md
tokens | ### Observability & Governance | Skill | Description | |-------|-------------| | `/analyze-costs` | Cloud cost analysis, recommendations, and anomaly detection | | `/security-report` | Security vulnerabilities, SBOMs, and compliance reports | | `/dora-metrics` | DORA metrics and engineering performance reports | | `/gitops-status` | GitOps application
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
