Projects

These are repository-ready and not yet published. They live in this site's own repository under projects/. No GitHub link is shown, because there is no repository behind one yet — and a plausible URL that returns 404 is exactly the unverifiable claim the testing methodology exists to rule out.

• Python starter

  projects/copilot-python-starter/

  A FastAPI invoice service whose instruction file states the decimal-rounding rule Copilot otherwise gets wrong in a way that looks entirely reasonable.

  Supports GitHub Copilot for Python and How to Create a copilot-instructions.md File

  • Executedpytest

• Docker starter

  projects/copilot-docker-starter/

  A multi-stage, non-root image. Documents the SIGTERM deadlock that made the first draft take 10,499ms to stop instead of 830ms.

  Supports GitHub Copilot for Docker and GitHub Copilot for DevOps Engineers

  • Executeddocker build

• Kubernetes starter

  projects/copilot-kubernetes-starter/

  Manifests with Pod Security Admission, three probes that each answer a different question, and a default-deny NetworkPolicy.

  Supports GitHub Copilot for Kubernetes and GitHub Copilot for DevOps Engineers

  • Not run herekubectl apply --dry-run=client -f manifests/kubectl is not installed in this environment; manifests are parsed and checked against the documented rules instead.

• Terraform starter

  projects/copilot-terraform-starter/

  An inert configuration anyone can validate without cloud credentials, with a validation block on every ranged variable.

  Supports GitHub Copilot for Terraform and GitHub Copilot for OpenTofu

  • Not run hereterraform validateTerraform is not installed in this environment; the configuration is checked structurally instead.

• GitHub Actions starter

  projects/copilot-github-actions-starter/

  A workflow with least-privilege permissions and every action pinned to a commit SHA, because a tag is mutable and runs with your token.

  Supports GitHub Copilot for GitHub Actions and Automating GitHub Copilot CLI with GitHub Actions

  • Executednpm test
  • Not run hereactionlintactionlint is not installed in this environment; the workflow is parsed and checked structurally instead.

• CLI workflows

  projects/copilot-cli-workflows/

  Terminal workflows organised around the permission ladder — read, then write, then a named shell command — with a verification step you perform yourself.

  Supports GitHub Copilot CLI: Complete Guide and GitHub Copilot CLI for DevOps Engineers, GitHub Copilot CLI Code Review Tutorial

  • Not applicable—Documentation. Checked for credential literals and for --allow-all-tools, which is forbidden here.

• Instruction file library

  projects/copilot-instructions-examples/

  Seven instruction files written to one test: an instruction earns its place only if a model would plausibly do something else without it.

  Supports GitHub Copilot Custom Instructions Explained and How to Create a copilot-instructions.md File

  • Executedfrontmatter validationEvery file is parsed for valid frontmatter and an applyTo key.

• Custom agents

  projects/copilot-custom-agents/

  Four agent definitions built on one idea: an agent that can both find a problem and fix it stops reporting the problems it cannot fix.

  Supports How to Create a Custom GitHub Copilot Agent and Using Custom Agents with GitHub Copilot CLI

  • Executedagent frontmatter validationEvery agent is checked for required keys, a non-empty tool list, and no bare shell grant.

• MCP starter

  projects/copilot-mcp-starter/

  Two MCP configurations side by side — the whole server, and seven named read tools — so the cost of pasting a vendor snippet is visible.

  Supports GitHub Copilot MCP: Complete Guide and GitHub MCP Server Tutorial, GitHub Copilot MCP Security: Governing External Tools

  • ExecutedJSON parse

• AI CI/CD pipeline

  projects/copilot-ai-cicd-starter/

  A pipeline built around where the automation stops. There is no deploy job and no credential that could perform one.

  Supports Build an AI-Powered CI/CD Pipeline with GitHub Copilot and GitHub Copilot Security Best Practices

  • Executedpytest
  • Not run heredocker build / terraform validateCovered by the dedicated Docker and Terraform projects; not re-run here.

• Code review corpus

  projects/copilot-code-review-corpus/

  Ten deliberately seeded defects with a machine-readable answer key and a scorer, so a claim about what AI review catches can be checked rather than asserted.

  Supports GitHub Copilot Code Review: Complete Guide and Build a Code Review Agent with GitHub Copilot

  • Executedscore.pyThe scorer is exercised against hand-written findings to confirm it rejects an unsupported claim and flags an unknown id. Every trigger in the answer key has been run and confirmed, except the timing-dependent one, which is marked.

• CLI permission matrix

  projects/copilot-cli-permission-matrix/

  Twenty-four permission configurations paired with the commands each should allow, refuse or confirm — every destructive probe in both direct and instrumental framing.

  Supports Using Custom Agents with GitHub Copilot CLI and GitHub Copilot CLI for DevOps Engineers

  • Not run hererunner.pyCopilot CLI is not installed in this environment, so the matrix has not been run. The runner sequences the work and formats the record; it deliberately does not drive the CLI.

8 validation commands are executed on every build of this site by npm run assets:check, which also scans every file in every project for credential-shaped literals.