How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
kubeflowCopilot instructionskubeflow/trainer/.github/copilot-instructions.md
confusing" - stay silent unless HIGH confidence it will cause problems ## Priority Areas (Review These) ### Security & Safety - Unsafe code blocks without justification - Command injection risks (shell commands, user input) - Path traversal
zeroc-iceCopilot instructionszeroc-ice/ice/.github/copilot-instructions.md
Requires changelog fragment: - Non-trivial bug fixes that affect valid programs, features, API changes, security fixes, performance improvements - Breaking changes, deprecations - Multi-language changes ### Doesn't require fragment: - Fixes that
No other project uses it yet
MicrosoftCopilot instructionsmicrosoft/DirectXTex/.github/copilot-instructions.md
/walbourn/directxtextest/wiki). See [test copilot instructions](https://github.com/walbourn/directxtextest/blob/main/.github/copilot-instructions.md) for additional information on the tests. - **Security**: This project uses secure coding practices from the Microsoft Secure Coding Guidelines, and is subject
aagentahCopilot instructionsaagentah/nw_wrld/.github/copilot-instructions.md
concrete: - A comment is **must-fix** only if it points to a likely **bug**, **security issue**, **contract break**, **race condition**, **data loss**, or a **clear regression risk
Microsoft AzureCopilot instructionsAzure/AKS/.github/copilot-instructions.md
limits: memory: "128Mi" cpu: "500m" ``` **Always include**: Resource requests/limits, labels, image tags (never `:latest`), security contexts where applicable. #### Documentation Requirements - Include prerequisites (tools, versions, permissions) - Provide example commands with placeholder
devcontainersCopilot instructionsdevcontainers/images/.github/copilot-instructions.md
features, increment minor and reset patch (`3.4.0` -> `3.5.0`). For security or bug fixes, increment only patch (`3.4.0` -> `3.4.1`). Copilot should flag a missing or incorrect bump. - Release preparation applies
WWBNReads credentialsCopilot instructionsWWBN/AVideo/.github/copilot-instructions.md
named files under the root or from generated/deployed copies. # AVideo Copilot Instructions ## Mandatory Canonical Security Policy For every task related to security in any way—including security advisories, vulnerability reports
Steady15 mentions in 2 weeks
No other project uses it yet
apacheCopilot instructionsapache/polaris/.github/copilot-instructions.md
silent unless the diff gives a concrete reason to believe a high-value documentation, security, or test coverage update may be missing. Only comment when you can name the changed
zereightCopilot instructionszereight/gitlab-mcp/.github/copilot-instructions.md
Evidence-based completion checks | Test runner | | @code-reviewer | Code quality, spec compliance | READ-ONLY | | @security-reviewer | OWASP vulnerability detection | READ-ONLY | | @test-engineer | Test strategy, TDD workflows | Full access | | @designer
Steady11 mentions in 2 weeks
No other project uses it yet
LedFxCopilot instructionsLedFx/LedFx/.github/copilot-instructions.md
G004, run through prek. Existing violations carry `# noqa`; PRs are auto-fixed by autofix.ci. ## Security Testing For input validation tests (paths, URLs), cover: path traversal (`../`, encoded variants, null bytes
No other project uses it yet
DynamoDSCopilot instructionsDynamoDS/Dynamo/.github/copilot-instructions.md
Dynamo has no separate linter. Static checks are the Roslyn analyzers the build runs — security rules CA2327/CA2328/CA2329/CA2330 are always errors; PublicAPI rules RS0016/RS0017 are errors only with the CI flags
MicrosoftDocsCopilot instructionsMicrosoftDocs/architecture-center/.github/copilot-instructions.md
this repository is grounded in the Azure Well-Architected Framework's pillars: Reliability, Security, Cost Optimization, Operational Excellence, and Performance Efficiency. - The data in this repository is grounded
MicrosoftCopilot instructionsmicrosoft/msticpy/.github/copilot-instructions.md
Splunk, and more - Threat intelligence lookups (VirusTotal, OTX, etc.) - Data enrichment (GeoIP, WhoIs, etc.) - Security-focused data analysis and visualization tools - Jupyter notebook integration for interactive investigations ## Package Structure - **Package
YoastCopilot instructionsYoast/wordpress-seo/.github/copilot-instructions.md
flag it. The release pipeline fails on images that haven't been pre-optimised. ### Security - Watch for SQL injection, XSS, CSRF, unescaped output, missing nonces on state-changing requests
apacheCopilot instructionsapache/trafficserver/.github/copilot-instructions.md
obvious algorithms or math - Workarounds for bugs in dependencies - Performance optimizations that reduce clarity - Security-critical sections - Complex state machine transitions **When NOT to add comments:** - Self-documenting code - Obvious
Steady20 mentions in 2 weeks
No other project uses it yet
scalityCopilot instructionsscality/cloudserver/.github/copilot-instructions.md
event handlers. | | Config changes | backward compatibility with existing env vars and `config.json`, default values. | | Security | command injection, header injection, XML external entity attacks, path traversal, SSRF in multi-backend requests
No other project uses it yet
GhostManagerReads credentialsCopilot instructionsGhostManager/Ghostwriter/.github/copilot-instructions/copilot-instructions.md
Ghostwriter Copilot Instructions ## Repository Overview **Ghostwriter** is an offensive security operations platform for report writing, asset tracking, and assessment management. Built with Python 3.10, Django 4.2, TypeScript/React in Docker containers
CactiCopilot instructionsCacti/cacti/.github/copilot-instructions.md
/cactid.php --foreground --debug`). - Repo checks: `composer lint`, `composer phpstan`, `composer phpcsfixer` (dry-run). - Refresh security baselines when the sink or hotspot guard reports drift: `tests/security/build_sink_inventory.sh
No other project uses it yet
besu-ethCopilot instructionsbesu-eth/besu/.github/copilot-instructions.md
Code Review - Focus on bugs, security issues, and correctness. Do not flag style nits. - Do not suggest adding comments, javadocs, or type annotations to unchanged code. - Do not flag naming
Steady21 mentions in 2 weeks
1 project uses a version of this
OpenAEV-PlatformCopilot instructionsOpenAEV-Platform/openaev/.github/copilot-instructions.md
planning, scheduling, and conducting cyber adversary simulation campaigns and tests. It helps organizations identify security gaps through simulations, training, and exercises from technical to strategic levels. ### Architecture - **Backend**: Spring Boot
Steady8 mentions in 2 weeks
No other project uses it yet
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
