Skip to main content

Bubo 🦉

PyPI Python 3.14+ Docker: GHCR GitHub Action CI SCM adapters OpenTelemetry OpenSSF Scorecard Signed with cosign SLSA 3 Ruff Managed with uv Docs License: MIT

Bubo AI code review tone examples

This wise owl is Bubo, an agentic AI code reviewer that reviews your GitLab MRs and GitHub PRs with the LLM model of your choice, and posts only the findings worth acting on as inline threads — no chatbot noise, no praise, no summaries.

  • Signal over noise — evidence-backed inline findings, confidence gates, optional verification, and deduplication.
  • Your model, your infrastructure — OpenAI, Anthropic, or another CLI-backed reviewer with your own deployment.
  • Feedback-driven reviews — recorded outcomes help tune thresholds and suppress recurring unwanted findings.
  • Review evidence, in one place — local dashboards and reports for findings, usage, policy decisions, and outcomes.
  • Compliance - cosign-signed releases with SBOMs, auditable on-prem report
  • Metrics and RoI — Read about real world metrics and ROI

Run continuous reviews through polling, or trigger reviews through MCP. The experimental GitHub Action.

Bubo dashboard, review activity, and reports shown as layered interface previews

Install

uv tool install bubo     # or: pipx install bubo
bubo init                # idempotent; seeds config + workspace + DB
bubo doctor              # verify before the first poll
bubo-poller service start # start the review service (polling + outcome sync)

Container → docker pull ghcr.io/mountainowl/bubo - Bring your own LLM CLI, you can use multiple architectures.

Documentation

Everything lives on the docs site — this README is just the front door.

Recipes Copy-paste GitLab / GitHub / in-house-model setups.
Features The full capability list.
Configuration Every setting, per section, plus a quick-start config.
Operate Deploy, schedule, grade outcomes, governance report.
Troubleshooting Host / infra fixes (sandbox, AppArmor).
Metrics & telemetry Emitted llm_review.* metrics and dashboards.
Updates & recovery Automatic/manual updates, safe deferrals and issue-ready failure reports; platform acceptance status.

Community

Contributing · Security policy · Release verification · Support · Code of conduct · License: MIT

Metadata

Release files for bubo 0.30.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for bubo 0.30.0
File Size Uploaded Provenance Actions
bubo-0.30.0.tar.gz 466.8 kB With provenance Details for bubo-0.30.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for bubo 0.30.0
File Interpreter ABI Platform Actions
bubo-0.30.0-py3-none-any.whl Python 3 none any Details for bubo-0.30.0-py3-none-any.whl

Total release size: 874.1 kB

Release files / bubo-0.30.0.tar.gz

Download URL bubo-0.30.0.tar.gz
Size 466.8 kB
Tags Source
SHA-256 checksum
How to use checksums
a3977153101e41042ef76ac9d284d21b6591eb9e10272cdc96e46e2f10065479
BLAKE2b-256 checksum
How to use checksums
a6dcff2d3c817840137858c863255fe0132253cfda88b86155e2ed7a02450d74
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 18, 2026.

Transparency log

Release files / bubo-0.30.0-py3-none-any.whl

Download URL bubo-0.30.0-py3-none-any.whl
Size 407.3 kB
Tags Python 3
SHA-256 checksum
How to use checksums
4998653dc3bb5d5ad6721804e56e44f9257575daca2f78fe133c532bdf31767a
BLAKE2b-256 checksum
How to use checksums
00b7333d5e4bdc1bfe67ad67fd65f4fd02f31d5a55e3d9af93c80e8cf2db3087
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 18, 2026.

Transparency log

Security for bubo 0.30.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for bubo-0.30.0.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 18, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

0.30.0 This release

2 release files Full provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page