YAGA
Repository conventions you can check locally and enforce in CI.
YAGA helps teams turn recurring review feedback into repeatable checks. Catch inconsistent commit structure, missing companion changes, unwanted files, and risky workflow settings before they become another review conversation. Start with one check and adopt more as your project needs them.
What can YAGA help with?
| Problem | What YAGA checks |
|---|---|
| Commit messages and branch names follow inconsistent conventions | Commit policy and branch naming defined by your team |
| A change lands without the related files your project expects | Changed-path rules, such as source changes accompanied by tests |
| Unwanted files, oversized blobs, or incompatible paths enter the repository | Committed-file checks for contents, sizes, names, and entry modes |
| GitHub Actions workflows drift from your security and maintenance rules | Workflow checks for immutable references, permission and checkout rules, and syntax |
| Local checks and CI enforce different policies | An explicit repository plan used in both places |
Checks produce actionable findings and reports for automation. You choose the policies and checks; YAGA does not require adopting the entire CLI at once.
Start here
Install YAGA and run your first check
YAGA requires Python 3.12 or newer. Its PyPI distribution is yaga-cli and its command is
yaga; the distribution named yaga is an unrelated project.
The core CLI is tested on Python 3.12 through 3.15. Optional model dependencies have their own
installation requirements.
- Adoption recipes — add checks to an existing workflow.
- Assess YAGA for CI — match your problem to a check and its prerequisites.
- Documentation — policies, examples, and operational guidance.
- Command reference — find the check for your task.
Optional review tools
For feedback beyond deterministic rules, YAGA offers model-backed commit advice and agent review plans and receipts. These are optional. The experimental GitHub review adapter has separate deployment and security requirements; it is not needed for ordinary local or CI checks.
Project status
YAGA is beta. CLI and configuration contracts may change. Workflow security checks cover specific rules, not a complete security audit; see the security model for boundaries and reporting.
Licensed under BSD-3-Clause.
Metadata
Release files for yaga-cli 0.2.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| yaga_cli-0.2.1.tar.gz | 3.3 MB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| yaga_cli-0.2.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 3.6 MB
Release files / yaga_cli-0.2.1.tar.gz
| Download URL | yaga_cli-0.2.1.tar.gz |
|---|---|
| Size | 3.3 MB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
76be70e2f5671da88905c5931e02298e72a0905d54295a79761971a94fb9182d
|
|
BLAKE2b-256 checksum How to use checksums |
59b17440e931a141f653139a0a9f3bea2d323387877a93ce66bca9a2d362664a
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 11, 2026.
Transparency logRelease files / yaga_cli-0.2.1-py3-none-any.whl
| Download URL | yaga_cli-0.2.1-py3-none-any.whl |
|---|---|
| Size | 275.4 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
6dfa3404abd4c408ff964dbac42b66c3e6f7321823a59ac612276c0a2184fc8c
|
|
BLAKE2b-256 checksum How to use checksums |
c032898610657c2b9dd5373d08fc01b6d854add85b56e6e3870a48a95cc3ced3
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 11, 2026.
Transparency log