agentmods.dev

pipelines copilot-instructions.md

pipelines copilot-instructions.md is an instructions file for GitHub Copilot from rios0rios0/pipelines. It costs 12,393 tokens per session, scanned D, original, MIT.

A repository guide for CI/CD pipeline templates, which automate building, testing, and releasing software across systems such as GitHub Actions, GitLab CI, and Azure DevOps.

In plain words
What is it for?
It helps maintain pipeline templates, run the repository's test suites, check dependency and toolchain compatibility, and validate release, deployment, security, and infrastructure workflows.
Why use it?
It gives contributors a common reference for validation commands and supply-chain rules across templates for many programming languages and tools.

Instructions file for GitHub Copilot

not rated 22 changed yesterday D scan 12,393 tokens original MIT
View the source file rios0rios0/pipelines
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/rios0rios0/pipelines/copilot-instructions
Clone the repo
git clone --depth 1 https://github.com/rios0rios0/pipelines

Made for: GitHub Copilot.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for pipelines copilot-instructions.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/rios0rios0/pipelines/copilot-instructions.svg)](https://agentmods.dev/instructions/rios0rios0/pipelines/copilot-instructions)
Your own site
<a href="https://agentmods.dev/instructions/rios0rios0/pipelines/copilot-instructions"><img src="https://agentmods.dev/badge/instructions/rios0rios0/pipelines/copilot-instructions.svg" alt="Measured on agentmods" height="20"></a>
Per session 12,393 This file is loaded in full into every session.
When invoked 12,393 The same file — it is already loaded in full.
Security scan D 3 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.12393 $0.12393
Opus 5 $0.06196 $0.06196
Sonnet 5 $0.02479 $0.02479
Haiku 4.5 $0.01239 $0.01239

Measured yesterday against content hash f2ebbbf581fd, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade D, and why

pipelines copilot-instructions.md scanned grade D with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Downloads and executes remote codehighSupply chain

curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.

fetch through `download_verified` from `verify-download.sh`. Never `curl | sh`, and never an unverified

Unrestricted tool accessmediumExcessive agency

A wildcard tool grant or "run any command" leaves no least-privilege boundary at all.

# Run any script

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

fetch through `download_verified` from `verify-download.sh`. Never `curl | sh`, and never an unverified
.github/copilot-instructions.md · 948 lines

How it starts

The opening of the file, as written. The whole thing — 948 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CI/CD Pipeline Templates Repository

ALWAYS FOLLOW THESE INSTRUCTIONS FIRST. Only fallback to additional search and context gathering if the information in these instructions is incomplete or found to be in error.

This repository provides comprehensive SDLC pipeline templates for GitHub Actions, GitLab CI, and Azure DevOps across multiple programming languages including GoLang, Java, Python, JavaScript, PHP, Ruby, .NET, Dart/Flutter, and Terraform/Terra.

Quick Reference

Essential Commands:

  • make test - Run all validation tests (Go, go-module-toolchain, CycloneDX main detection, Go cache trim, Lambda, YAML merge, SonarQube, release tag, tftest-gen, order-check, var-catalog, terraform-validate, terraform-provider-mirror, docker-multi-arch, basic-checks, gitignore, dependency-check, dependency-track, goreleaser-prepare, release-version-extraction, release-reconcile, deploy-providers, memory-detection, dart-pipeline, javascript-pipeline, workflow-composition, supply-chain, runner-cache-gating, dependency-updates, azure-step-names)
  • make test-go-script - Test Go script changes specifically
  • make test-go-module-toolchain - Test that every go.mod toolchain directive is readable by the images/analysers that consume it specifically
  • make test-go-tool-staleness - Test that a source-built Go tool (govulncheck) is rebuilt when its toolchain/pin moves specifically
  • make test-go-tmpdir-modcache - Test that the Go module cache stays out of $TMPDIR specifically
  • make test-go-integration-scope - Test which packages the Go runner's integration phase selects specifically
  • make test-lambda - Test Lambda template validation specifically
  • make test-yaml-merge - Test YAML merge validation specifically
  • make test-sonarqube - Test SonarQube auto-derivation specifically
  • make test-release-tag-idempotency - Test release tag idempotency specifically
  • make test-tftest-gen - Test tftest-gen generator specifically
  • make test-order-check - Test the Terragrunt file-ordering checker/fixer specifically
  • make test-var-catalog - Test the shared variable-declaration generator specifically
  • make test-terraform-validate - Test the root-module terraform validate tier specifically
  • make test-terraform-provider-mirror - Test the local Terraform provider mirror specifically
  • make test-docker-multi-arch - Test 40-delivery/docker multi-arch contract specifically
  • make test-basic-checks - Test basic-checks changelog validation (chlog fragments + legacy CHANGELOG.md) specifically
  • make test-gitignore - Test the shared .gitignore block generator specifically
  • make test-dependency-check - Test the OWASP Dependency-Check NVD cache / API-key contract specifically
  • make test-dependency-track - Test the Dependency-Track BOM uploader (identity, isLatest gating, PR skip, cross-platform wiring) specifically
  • make test-goreleaser-prepare - Test the GoReleaser main package detection specifically
  • make test-release-version-extraction - Test release version extraction (tag ref + bump commit) specifically
  • make test-release-reconcile - Test release reconciliation gap detection specifically
  • make test-deploy-providers - Test the MVP hosting deployment providers (Cloudflare, Vercel, Render, Netlify, Fly.io) specifically
  • make test-memory-detection - Test the cgroup-aware memory ceiling detection specifically
  • make test-dart-pipeline - Test the Dart/Flutter pipeline (scripts, Semgrep rules, cross-platform wiring) specifically
  • make test-javascript-pipeline - Test the JavaScript formatting gate (Prettier runner + cross-platform wiring) specifically
  • make test-workflow-composition - Test the GitHub Actions workflow composition standard specifically
  • make test-supply-chain - Test the supply-chain pinning contract (actions, images, binaries, packages) specifically
  • make test-runner-cache-gating - Test that no GitHub Actions cache restores into $HOME on a self-hosted runner specifically
  • make test-dependency-updates - Test the dependency-update checker specifically
  • make test-azure-step-names - Test Azure DevOps step-name uniqueness across expanded templates specifically
  • make check-dependency-updates - Report which pinned dependencies have a newer release (hits the network)
  • bash global/scripts/shared/cleanup.sh - Clean up build reports
  • docker --version && make --version && go version - Check dependencies

Read the full file on GitHub · 948 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday Changed · +8 lines · +153 tokens per session f2ebbbf581fd
  2. 5d ago First seen · 940 lines · 12,240 tokens per session scan D 070d56241cc1

Subscribe to this mod's changes

pipelines copilot-instructions.md is an instructions file published in the GitHub repository rios0rios0/pipelines (22 stars, last pushed today), licensed MIT. It adds 12,393 tokens to every session, about $0.0620 per session on Opus 5. A static security scan graded it D with 3 findings (downloads and executes remote code, unrestricted tool access, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

CI and CDDevOps and cloudazure-devopsgithub-actionsgitlab-ci
Related

Other instructions, from other repositories

run-gemini-cli GEMINI.md

Instructions for google-github-actions/run-gemini-cli, covering guidelines for developing this github action, core principles for this action and your role in development.

google-github-actions/run-gemini-cli · 551 tokens

agents-shipgate AGENTS.md

AGENTS.md instructions for ThreeMoonsLab/agents-shipgate, covering agents shipgate · agent instructions, what this project is, naming (canonical), install (canonical) and run (canonical).

ThreeMoonsLab/agents-shipgate · 17,161 tokens

agents-shipgate CLAUDE.md

Claude Code instructions for ThreeMoonsLab/agents-shipgate, covering claude code instructions, running the cli in this repository, permissions, output handling and slash command.

ThreeMoonsLab/agents-shipgate · 787 tokens

local-ci CLAUDE.md

Claude Code instructions for redwoodjs/local-ci, covering local ci — agent instructions, rules, ci and code.

redwoodjs/local-ci · 297 tokens

local-ci AGENTS.md

AGENTS.md instructions for redwoodjs/local-ci, a project described as: Run GitHub Actions locally — pause on failure, retry in place, and keep caches on your machine.

redwoodjs/local-ci · 4 tokens

ai-news-agent AGENTS.md

AGENTS.md instructions for nickzren/ai-news-agent, covering ai news agent, purpose, preferred agent flow, defaults and status artifacts.

nickzren/ai-news-agent · 698 tokens