go-rest-api-boilerplate: Instructions file for GitHub Copilot

.github/copilot-instructions.md

go-rest-api-boilerplate copilot-instructions.md is an instructions file for GitHub Copilot from vahiiiid/go-rest-api-boilerplate. It costs 4,249 tokens per session, scanned A, original, MIT.

A set of project-specific instructions for developing GRAB, a Go REST API starter with authentication, permissions, database migrations, and Docker-based development.

In plain words
What is it for?
Use it when developing the API to follow its architecture, authentication and permissions rules, migration process, Docker workflow, and version-checking practices.
Why use it?
It helps contributors follow the project's existing architecture and check their environment instead of relying on fixed software versions.

Instructions file for GitHub Copilot

Written for GitHub Copilot: a Copilot instructions file. Also seen: mentions AGENTS.md.

This is vahiiiid/go-rest-api-boilerplate's own configuration. It tells GitHub Copilot how to work on go-rest-api-boilerplate itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything go-rest-api-boilerplate configures โ†’

Reuse

Borrowing it

Nothing to install: this file belongs to vahiiiid/go-rest-api-boilerplate. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/vahiiiid/go-rest-api-boilerplate/main/.github/copilot-instructions.md
Clone the repo
git clone --depth 1 https://github.com/vahiiiid/go-rest-api-boilerplate

Made for: GitHub Copilot.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for go-rest-api-boilerplate copilot-instructions.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/vahiiiid/go-rest-api-boilerplate/copilot-instructions.svg)](https://agentmods.dev/instructions/vahiiiid/go-rest-api-boilerplate/copilot-instructions)
Your own site
<a href="https://agentmods.dev/instructions/vahiiiid/go-rest-api-boilerplate/copilot-instructions"><img src="https://agentmods.dev/badge/instructions/vahiiiid/go-rest-api-boilerplate/copilot-instructions.svg" alt="Measured on agentmods" height="20"></a>
Per session 4,249 This file is loaded in full into every session.
When invoked 4,249 The same file โ€” it is already loaded in full.
Security scan A 1 finding. A grade says what 26 rules found in the file โ€” not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.04249 $0.04249
Opus 5 $0.02124 $0.02124
Sonnet 5 $0.00850 $0.00850
Haiku 4.5 $0.00425 $0.00425

Measured 8d ago against content hash 66eacd056e28, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade A, and why

go-rest-api-boilerplate copilot-instructions.md scanned grade A with 1 finding against 26 rules in 11 categories โ€” prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency โ€” measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl http://localhost:8080/health
Origin

Copies of this mod

1 near-identical copy found in the catalogue:

.github/copilot-instructions.md ยท 660 lines

How it starts

The opening of the file, as written. The whole thing โ€” 660 lines โ€” stays where its author put it; the contents beside it link to each section on GitHub.

GitHub Copilot Instructions for GRAB (Go REST API Boilerplate)

Version: v2.0.0
Last Updated: 2025-12-10
Purpose: Developer-focused guidelines for building APIs with GRAB


๐Ÿ“‹ What is GRAB?

GRAB (Go REST API Boilerplate) is a production-ready Go REST API starter with:

  • Clean Architecture (Handler โ†’ Service โ†’ Repository)
  • JWT Authentication with refresh token rotation
  • Role-Based Access Control (RBAC)
  • Database Migrations (golang-migrate)
  • Docker-First Development
  • 89.81% Test Coverage
  • Comprehensive Documentation: https://vahiiiid.github.io/go-rest-api-docs/

๐ŸŽฏ Core Development Principles

1. Environment Detection - Don't Hardcode Versions

Instead of stating "Go 1.24" or "PostgreSQL 15", show how to check:

# Check Go version
go version

# Check Docker version
docker --version

# Check PostgreSQL version (inside container)
make exec-db
psql --version

2. Docker-First Development

  • Developers run make commands on host
  • Makefile automatically detects if Docker container is running
  • Commands execute in container if available, host otherwise
  • No need to manually enter container - the Makefile handles execution context
# Start containers first
make up

# Run tests (automatically in container if running)
make test

# Run linting (automatically in container if running)
make lint

# Apply lint fixes (automatically in container if running)
make lint-fix

# Generate Swagger docs (automatically in container if running)
make swag

3. Clean Architecture Pattern

Every domain follows this structure:

internal/
โ””โ”€โ”€ <domain>/
    โ”œโ”€โ”€ model.go       # Domain models (GORM)
    โ”œโ”€โ”€ dto.go         # Data Transfer Objects (API contracts)
    โ”œโ”€โ”€ repository.go  # Database access layer
    โ”œโ”€โ”€ service.go     # Business logic layer
    โ”œโ”€โ”€ handler.go     # HTTP handlers (Gin)
    โ””โ”€โ”€ *_test.go      # Tests for each layer

Read the full file on GitHub ยท 660 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen ยท 660 lines ยท 4,249 tokens per session scan A 66eacd056e28

Subscribe to this mod's changes

go-rest-api-boilerplate copilot-instructions.md is an instructions file published in the GitHub repository vahiiiid/go-rest-api-boilerplate (65 stars, last pushed 21d ago), licensed MIT. It adds 4,249 tokens to every session, about $0.0212 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories

klaussy-agents fastapi.instructions.md

Instructions for steph-dove/klaussy-agents: Example context from fastapi/applications.py (lines 214-220).

steph-dove/klaussy-agents ยท 1,171 tokens

codex AGENTS.md

AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.

openai/codex ยท 5,153 tokens

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode ยท 6,785 tokens

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js ยท 7,296 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain ยท 4,469 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).

microsoft/vscode ยท 5,001 tokens