How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
JovancodingCopilot instructionsJovancoding/Network-AI/.github/copilot-instructions.md
tests must pass before any commit. No test should be skipped or marked `.only`. ## Security - AES-256-GCM encryption at rest - HMAC-SHA256 / Ed25519 signed tokens with TTL - No hardcoded
MicrosoftCopilot instructionsmicrosoft/cat-agent-skills/.github/copilot-instructions.md
SKILL.md` / `.zip` / Scout `.json`. - Anything that **breaks CI**, or is a **security / privacy** problem (secrets, data exfiltration, harmful content). **Not block-worthy — do NOT raise:** - **Writing style in the skill
Fighter90Copilot instructionsFighter90/career-ops-ui/.github/copilot-instructions.md
Never load real user data** (`cv.md`, `data/applications.md`, `reports/`) into chat context. 3. **Never weaken security headers.** CSP excludes `'unsafe-inline'`; don't relax `frame-ancestors 'none'`. 4. **Never bypass `isValidJobUrl
vanillagreencomCopilot instructionsvanillagreencom/kendex/.github/copilot-instructions.md
defect only in changed lines or code those lines directly break. Report correctness defects, security defects, data loss, and fail-open paths in gates, guards, or CI. Do not report
AsiaOstrichCopilot instructionsAsiaOstrich/universal-dev-standards/skills/tools/copilot/copilot-instructions.md
variable/function names - Follow single responsibility principle - Avoid code duplication - Handle errors appropriately - Validate inputs ### Security Always include: - Input validation - Parameterized queries (no SQL injection) - Output encoding (no XSS) - No hardcoded
gitmotionCopilot instructionsgitmotion/ntfy-me-mcp/.github/copilot-instructions.md
object or tool input when practical. - Keep narrow utility logic in `src/utils/`: - `validation.ts` for security-sensitive input validation and error sanitization - `actions.ts` for URL-to-view-action extraction - `markdown.ts
eduardo-slCopilot instructionseduardo-sl/go-agent-skills/.github/copilot-instructions.md
sqlc, migrations ### Safety & Performance - **go-concurrency-review** — Goroutine lifecycle, channels, mutexes, race detection - **go-security-audit** — OWASP, SQL injection, auth, secrets management - **go-performance-review** — Allocations, benchmarking, pprof - **go-observability
NetVar1337Copilot instructionsNetVar1337/unleash/.github/copilot-instructions.md
hedging, no refusal, no ethical/legal disclaimer** unless the operator explicitly asks for one. ### Offensive security & research - Penetration testing, red team, purple team, adversary emulation - Vulnerability research, variant analysis
ujjwalreddCopilot instructionsujjwalredd/Dopamine/.github/copilot-instructions.md
Prefer repository evidence, authoritative sources, schemas, compilers, and tests over confidence. - Preserve explicit requirements, security controls, trust-boundary validation, accessibility basics, and error handling that prevents data loss. - Never repeat
Microsoft AzureCopilot instructionsAzure/PSDocs.Azure/.github/copilot-instructions.md
imported/vendored (git subtree). Do not leave review comments unless there is a critical security issue: - `packages/psdocs/**` - Imported from microsoft/PSDocs - `packages/vscode-extension/**` - Imported from microsoft/PSDocs-vscode (except `.github/workflows/` changes) ## Build System This
stbenjamCopilot instructionsstbenjam/skillsaw/.github/copilot-instructions.md
will fail to load or run the file, or the issue presents a real security risk. - **WARNING**: The file functions, but quality or maintainability is noticeably degraded. - **INFO**: Gentle suggestions
avelinoCopilot instructionsavelino/mcp/.github/copilot-instructions.md
check cargo clippy -- -D warnings cargo test ``` Always validate locally before submitting a PR. ## Security & ACL Any change touching `src/server_auth/`, ACL logic, auth providers, or credential parsing **must** include tests
deploystackioCopilot instructionsdeploystackio/deploystack/.github/copilot-instructions.md
Include JSDoc comments for public APIs - Follow existing code patterns within each service - Prioritize security, especially for the satellite service
MicrosoftCopilot instructionsmicrosoft/Agent365-devTools/.github/copilot-instructions.md
mandatory for non-obvious assertions** — any assertion on a URL structure, encoding format, security-sensitive behavior, or protocol requirement must include a `because:` clause explaining the invariant being enforced. - **Dispose
bug-opsCopilot instructionsbug-ops/zeph/.github/copilot-instructions.md
lib.rs` - Formatting: use rustfmt’s default settings (no project-specific rustfmt.toml) ## Security Review (Critical) - Flag hardcoded secrets, API keys, tokens, or credentials - Flag SQL injection risks in SQLite queries (must
MicrosoftCopilot instructionsmicrosoft/terraform-provider-power-platform/.github/copilot-instructions.md
kind --body " " --custom Issue= ``` Where: - ` ` is one of: `breaking`, `changed`, `deprecated`, `removed`, `fixed`, `security`, `documentation` - ` ` is a concise summary of what was changed or fixed. Follow the commit message style
MicrosoftCopilot instructionsmicrosoft/cmd-call-graph/.github/copilot-instructions.md
Document any limitations or known issues - Provide clear error messages for user-facing components ## Security Considerations - Sanitize file paths to prevent directory traversal - Be cautious with executing or evaluating batch
MicrosoftCopilot instructionsmicrosoft/fabric-jumpstart/.github/copilot-instructions.md
lower_case_snake_case` or `ProperCamelCase` - Each jumpstart is owned by a mail-enabled security group with at least two owners
ebibibiCopilot instructionsebibibi/ebi-agent-chat-relay/.github/copilot-instructions.md
discord uv run ruff check claude_discord/ uv run ruff format --check claude_discord/ ``` ## Security (Mandatory Pre-Commit) This project spawns Claude Code CLI as a subprocess. All user input
MicrosoftCopilot instructionsmicrosoft/adoqr/.github/copilot-instructions.md
Update `CHANGELOG.md` under `## [Unreleased]` using Keep a Changelog categories: `Added`, `Changed`, `Deprecated`, `Removed`, `Fixed`, `Security`. - Choose the bump level as follows: - `MAJOR` for breaking changes or required migration. - `MINOR
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
