Skip to main content

Bubo 🦉

PyPI Python 3.14+ Docker: GHCR GitHub Action CI SCM adapters OpenTelemetry OpenSSF Scorecard Signed with cosign SLSA 3 Ruff Managed with uv Docs License: MIT

Bubo AI code review tone examples

This wise owl is Bubo, an agentic AI code reviewer that reviews your GitLab MRs and GitHub PRs with the LLM model of your choice, and posts only the findings worth acting on as inline threads — no chatbot noise, no praise, no summaries.

  • Signal over noise — evidence-backed inline findings, confidence gates, optional verification, and deduplication.
  • Your model, your infrastructure — OpenAI, Anthropic, or another CLI-backed reviewer with your own deployment.
  • Feedback-driven reviews — recorded outcomes help tune thresholds and suppress recurring unwanted findings.
  • Review evidence, in one place — local dashboards and reports for findings, usage, policy decisions, and outcomes.
  • Compliance - cosign-signed releases with SBOMs, auditable on-prem report
  • Metrics and RoI — Read about real world metrics and ROI

Run continuous reviews through polling, or trigger reviews through MCP. The experimental GitHub Action.

Bubo dashboard, review activity, and reports shown as layered interface previews

Install

uv tool install bubo     # or: pipx install bubo
bubo init                # idempotent; seeds config + workspace + DB
bubo doctor              # verify before the first poll
bubo-poller service start # start the review service (polling + outcome sync)

Container → docker pull ghcr.io/mountainowl/bubo - Bring your own LLM CLI, you can use multiple architectures.

Documentation

Everything lives on the docs site — this README is just the front door.

Recipes Copy-paste GitLab / GitHub / in-house-model setups.
Features The full capability list.
Configuration Every setting, per section, plus a quick-start config.
Operate Deploy, schedule, grade outcomes, governance report.
Troubleshooting Host / infra fixes (sandbox, AppArmor).
Metrics & telemetry Emitted llm_review.* metrics and dashboards.
Updates & recovery Automatic/manual updates, safe deferrals and issue-ready failure reports; platform acceptance status.

Community

Contributing · Security policy · Release verification · Support · Code of conduct · License: MIT

Metadata

Release files for bubo 0.30.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for bubo 0.30.1
File Size Uploaded Provenance Actions
bubo-0.30.1.tar.gz 473.3 kB With provenance Details for bubo-0.30.1.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for bubo 0.30.1
File Interpreter ABI Platform Actions
bubo-0.30.1-py3-none-any.whl Python 3 none any Details for bubo-0.30.1-py3-none-any.whl

Total release size: 886.8 kB

Release files / bubo-0.30.1.tar.gz

Download URL bubo-0.30.1.tar.gz
Size 473.3 kB
Tags Source
SHA-256 checksum
How to use checksums
23c1a374bfb2eeb968810bde56f66eac1b5ae8ea2d2526538f88ad729e0fcedd
BLAKE2b-256 checksum
How to use checksums
9c213c9f8afc6d4680d2131685a7af31b8f022a89dbcaa9f56199ecc7e22a6bc
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 18, 2026.

Transparency log

Release files / bubo-0.30.1-py3-none-any.whl

Download URL bubo-0.30.1-py3-none-any.whl
Size 413.5 kB
Tags Python 3
SHA-256 checksum
How to use checksums
db7795e6c3852fa6f68df402fed233e0ef2a33e898d4c31bd446b3f53c71a485
BLAKE2b-256 checksum
How to use checksums
244a094eb95372e1d89a2b88977c65a55c77d70350354f6fabe54863f7326037
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 18, 2026.

Transparency log

Security for bubo 0.30.1

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for bubo-0.30.1.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 18, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

0.30.1 This release

2 release files Full provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page