How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
MicrosoftCopilot instructionsmicrosoft/haste/.github/copilot-instructions.md
Satellite imagery, GDAL/rasterio, provider adapters, damage assessment | Yes | | `ui` | React/FluentUI/Azure Maps/MSAL, frontend only | Yes | | `security` | Dependabot alerts, CVE analysis, dependency audits. Never auto-merges. | No (reports only) | ### Validation Agents | Agent
MicrosoftCopilot instructionsmicrosoft/edge-ai/.github/copilot-instructions.md
Comprehensive coding guidelines and instructions for edge ai - Brought to you by microsoft/edge-ai
haruCopilot instructionsharu/redmine_ai_helper/.github/copilot-instructions.md
prompt templates (EN/JP) - `config/ai_helper/config.json` — MCP server configuration - `config/ai_helper/config.yml` — Langfuse configuration ## Critical Implementation Details **Frontend Security:** - Build HTML structures in ERB templates (`*.html.erb`), not in JavaScript - This prevents
putervisionCopilot instructionsputervision/state-memory-mcp/.github/copilot-instructions.md
read/write access to the workspace's local `.vision-memory-mcp/` cache directory. # Cryptographic Vault & Security (webcrypt-mcp) This project provides native `webcrypt-mcp` tooling for zero-dependency
Microsoft AzureCopilot instructionsAzure/gpt-rag-orchestrator/.github/copilot-instructions.md
under `src/strategies/`. ## Working rules - Confirm the goal, acceptance criteria, constraints, current behavior, and affected security or compatibility boundaries. - Reuse repository patterns and tools. Make small, complete changes without unrelated refactoring
Microsoft AzureCopilot instructionsAzure/Azure-Landing-Zones/.github/copilot-instructions.md
Component | Bicep Registry Module | Type | |-----------|----------------------|------| | Management group hierarchy (int-root, platform, connectivity, identity, management, security, landing zones, corp, online, sandbox, decommissioned) | `br/public:avm/ptn/alz/empty` | Pattern | **Logging:** | Component | Bicep Registry Module | Type
MicrosoftCopilot instructionsmicrosoft/webui/.github/copilot-instructions.md
doesn't suffice. - Every dependency must pass `cargo deny check` (license allowlist + security advisories). - Prefer well-maintained crates under MIT or Apache-2.0. ### Safety - No `unsafe` without a `// SAFETY:` comment
MicrosoftCopilot instructionsmicrosoft/Microsoft-AI-Decision-Framework/.github/copilot-instructions.md
Overall guidelines about the project.
MicrosoftCopilot instructionsmicrosoft/vscode-powerquery-sdk/.github/copilot-instructions.md
extension logs - Webview dev server runs on localhost:3001 for standalone testing ## Security Considerations - Credential storage in `%LOCALAPPDATA%/Microsoft/pqtest` - Extension handles sensitive authentication data - Test environments should use mock/test credentials
selfagencyCopilot instructionsselfagency/opilot/.github/copilot-instructions.md
Prefer simple conditionals over nested ternary operators - Group related code together and separate concerns #### Security - Add `rel="noopener"` when using `target="_blank"` on links - Avoid `dangerouslySetInnerHTML` unless absolutely necessary
mturacCopilot instructionsmturac/everything-openai-codex/.github/copilot-instructions.md
test before the implementation; target 80%+ coverage. 4. **Review before committing** — check for security issues, code quality, and regressions. 5. **Conventional commits** — `feat`, `fix`, `refactor`, `docs`, `test`, `chore`, `perf
MicrosoftCopilot instructionsmicrosoft/agent-forge/src/cli/reference/copilot-instructions.md
parallel for unbiased, comprehensive analysis. ```yaml --- name: "Thorough Reviewer" tools: ['read', 'search', 'agent'] agents: ['security-reviewer', 'quality-reviewer', 'arch-reviewer'] --- # Body: launch reviewers in parallel, synthesize findings ``` ### Pipeline Pattern Sequential
Microsoft AzureCopilot instructionsAzure/cyclecloud-slurm/.github/copilot-instructions.md
HIGH-SEVERITY issue exists -> RECOMMENDATION: DO NOT MERGE (regardless of score). HIGH-SEVERITY includes: security flaw, correctness bug likely to break users, data loss risk, auth/secret exposure, unsafe concurrency/race. - Else
MicrosoftCopilot instructionsmicrosoft/chartifact/.github/copilot-instructions.md
variables. - **Presets**: Named sets of variable values for quick scenario switching. 2. **Sandboxed Runtime**: Securely renders documents in isolated environments. 3. **VS Code Extension**: Provides tools for editing, previewing
PeargentCopilot instructionsPeargent/peargent/.github/copilot-instructions.md
STRICT) - Prefer **one high-level summary comment** - Inline comments are **allowed ONLY** for: - Bugs - Security issues - Broken imports - Public API breakage - If the PR is acceptable, say **“Looks good
putervisionCopilot instructionsputervision/vision-memory-mcp/.github/copilot-instructions.md
databases, frameworks) and link them to the milestones/tasks using `decided_in` edges. # Cryptographic Vault & Security (webcrypt-mcp) This project provides native `webcrypt-mcp` tooling for zero-dependency
vaultysCopilot instructionsvaultys/VaultysClaw/.github/copilot-instructions.md
agent orchestration platform. Monorepo (pnpm workspaces + Turborepo) with three packages: - `packages/shared` — core types, security utils, channel protocol - `packages/control-plane` — Next.js App Router dashboard + WebSocket server (port 3000 / WS 8080) - `packages/agent-controller` — agent
claude-worldCopilot instructionsclaude-world/claude-skill-antivirus/.github/copilot-instructions.md
This is a JavaScript security scanner for Claude Code Skills. It has 9 detection engines. Security is critical — never bypass checks, validate all input
TheArchitectitCopilot instructionsTheArchitectit/agent-guardrails-template/.github/copilot-instructions.md
Return meaningful error messages - Never silently swallow exceptions - Prefer explicit error returns over panics/exceptions ### Security - Never suggest committing secrets, keys, or credentials - Never suggest .env files in version control - Validate
mk-knight23Copilot instructionsmk-knight23/Kazis-Agents-Army/.github/copilot-instructions.md
PostgreSQL, MongoDB, Redis, DynamoDB, Neo4j. Rule of Three for abstractions. Kaizen continuous improvement. ### SENTINEL — Security Guardian For security reviews, auth, and compliance. STRIDE + DREAD threat modeling. Full OWASP
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
