mirror of
https://github.com/github/awesome-copilot.git
synced 2026-07-15 10:25:18 +00:00
prasadgd9022
36b30eb113
* Add tm7-threat-model skill for valid TM7 file generation Adds a skill that generates valid Microsoft Threat Modeling Tool (.tm7) files using the correct WCF DataContractSerializer format, with a minimal reference file. Includes STRIDE threat generation workflow and a checklist of common serialization mistakes that corrupt .tm7 files. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Address PR review: sanitize reference model, fix dangling refs, move to assets - Move example-minimal.tm7 into assets/ per repo convention (aaronpowell). - Remove personal/corporate metadata from the reference model (Owner, Contributors, ChangedBy domain account, project names). - Make the reference model self-contained: add a second stencil so the data flow and threat SourceGuid/TargetGuid/FlowGuid all resolve to real elements. - Fix SKILL.md threat contract (KeyValueOfstringThreatpc_P0_PhOB with b:-prefixed KnowledgeBase fields) to match the bundled reference. - Reconcile guidance: MetaInformation/Notes/KnowledgeBase are valid schema elements and must be preserved; only SecurityGaps/Mitigations are invalid. - Regenerate docs/README.skills.md and normalize line endings to LF. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Address 2nd review: correct KnowledgeBase placement, valid TypeIds, z:Id uniqueness - Document KnowledgeBase as a top-level sibling after ThreatMetaData (not embedded) - Update skeleton to show <ThreatMetaData/>, sibling <KnowledgeBase>, and <Profile> - Replace TypeIds absent from the bundled KB: AzureCosmosDB -> AzureSQLDB, HumanUser -> Mobile, GenericDataFlow -> Request - Require z:Id uniqueness across the file in the common-mistakes checklist Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * ci: exclude *.tm7 exports from codespell MTM DataContract .tm7 exports embed base64 icon blobs whose substrings (oT, bu, wth, mKe, ...) trigger codespell false positives. Skip *.tm7, matching the existing convention for binary/asset files. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: prasad <prasaddharaskar@gmail.com> Co-authored-by: Aaron Powell <me@aaron-powell.com>
69 lines
2.7 KiB
Plaintext
69 lines
2.7 KiB
Plaintext
[codespell]
|
|
|
|
# Ignore intentional misspellings used as examples and technical terms
|
|
|
|
# numer - intentional example typo in add-educational-comments.prompt.md
|
|
|
|
# wit - proper technical term/name (sardonic wit, Gilfoyle character trait)
|
|
|
|
# aks - Azure Kubernetes Service (AKS) abbreviation
|
|
|
|
# edn - Extensible Data Notation (Clojure data format)
|
|
|
|
# ser - serialization abbreviation
|
|
|
|
# ois - ObjectInputStream abbreviation in Java
|
|
|
|
# gir - valid abbreviation/technical term
|
|
|
|
# rouge - Rouge is a syntax highlighter (not "rogue")
|
|
|
|
# categor - TypeScript template literal in website/src/scripts/pages/skills.ts:70 (categor${...length > 1 ? "ies" : "y"})
|
|
|
|
# aline - proper name (Aline Ávila, contributor)
|
|
|
|
# ative - part of "Declarative Agents" in TypeSpec M365 Copilot documentation (collections/typespec-m365-copilot.collection.md)
|
|
|
|
# dateA, dateB - variable names used in sorting comparison functions
|
|
|
|
# TE - HTTP transfer coding header
|
|
|
|
# alle - Finnish word meaning "under/below" (not "all" or "alley")
|
|
|
|
# vai - Finnish word meaning "or"
|
|
|
|
# FillIn - pdftk-server skill reference file available permission
|
|
|
|
# LOD - Level of Detail
|
|
|
|
# InOut - template property in skills/game-engine/assets/2d-platform-game.md
|
|
|
|
# pixelX - template variable in skill/game-engine/assets/simple-2d-engine.md
|
|
|
|
# aNULL - HTTPS configuration cipher string
|
|
|
|
# Wee, Sherif - proper name (Wee, Sherif, contributor names should not be flagged as typos)
|
|
|
|
# queston - intentional misspelling example in skills/arize-dataset/SKILL.md demonstrating typo detection in field names
|
|
|
|
# nin - MongoDB $nin operator in security instructions NoSQL injection detection regex
|
|
|
|
# Vertexes - FreeCAD shape sub-elements used as property of obj.Shape
|
|
|
|
# FO - tasklist option /FO to format running task output
|
|
|
|
# CAF - Microsoft Cloud Adoption Framework acronym
|
|
|
|
# ans - bash and powershell variable short for answer
|
|
|
|
# GUD - "Guideline" identifier prefix in the create-implementation-plan skill spec (alongside REQ, SEC, CON, PAT, etc.)
|
|
|
|
# Vally/vally - Name of product
|
|
|
|
ignore-words-list = numer,wit,aks,edn,ser,ois,gir,rouge,categor,aline,ative,afterall,deques,dateA,dateB,TE,FillIn,alle,vai,LOD,InOut,pixelX,aNULL,Wee,Sherif,queston,Vertexes,nin,FO,CAF,Parth,ans,gud,Vally,vally
|
|
|
|
# Skip certain files and directories
|
|
# *.tm7 - MTM DataContract exports; embedded base64 icon blobs trigger false positives
|
|
|
|
skip = .git,node_modules,package-lock.json,*.lock,website/build,website/.docusaurus,.all-contributorrc,./skills/geofeed-tuner/assets/*.json,./skills/geofeed-tuner/references/*.txt,./plugins/fastah-ip-geo-tools/skills/geofeed-tuner/assets/*.json,./plugins/fastah-ip-geo-tools/skills/geofeed-tuner/references/*.txt,./extensions/arcade-canvas/game/phaser.min.js,*.tm7
|