Tiaki

Tiaki is an AUR helper for Arch Linux with built-in security auditing. It is a fork of paru that runs a configurable security audit before the normal PKGBUILD review.

• Local YAML rule scan of package diffs
• Online vulnerability lookup via OSV
• OpenAI-compatible AI analysis of diffs (local Ollama or any compatible endpoint)
• Findings ranked as Critical, High, Medium, or Low
• Critical findings pause and ask for confirmation unless --noconfirm is used

Installation

sudo pacman -S --needed base-devel

Clone this repository or install from the AUR:

git clone https://git.evileko.dev/evileko/tiaki.git
cd tiaki
makepkg -si

Quick start

# Search and install a package
tiaki <target>

# Install a specific package
tiaki -S <target>

# Upgrade AUR packages
tiaki -Sua

# Show available AUR updates
tiaki -Qua

# Build and install a local PKGBUILD
tiaki -Bi .

Configuration

Tiaki reads /etc/tiaki.conf and ~/.config/tiaki/tiaki.conf.

Security audit options

All audit features are enabled by default. Add these to [options] in tiaki.conf or pass them as CLI flags:

Config key	CLI flag	Default	Description
SecurityAudit / NoSecurityAudit	--[no-]security-audit	on	Enable the audit before review
Osv / NoOsv	--[no-]osv	on	Query OSV for known vulnerabilities
Ai / NoAi	--[no-]ai	on	Send diffs to an AI endpoint for analysis
AiUrl	--ai-url	http://localhost:11434/v1	OpenAI-compatible endpoint
AiModel	--ai-model	kimi-k2.6:cloud	Model name to request
AiTimeout	--ai-timeout	60	Request timeout in seconds
RulesPath	--rules-path	auto	Path to the local YAML rule database

Example ~/.config/tiaki/tiaki.conf:

[options]
AiUrl = http://localhost:11434/v1
AiModel = kimi-k2.6:cloud

The AI API key is read from the TIAKI_AI_KEY environment variable only and is never stored in tiaki.conf.

Rule files

Tiaki loads rules in this order:

1. RulesPath if set in config
2. $XDG_CONFIG_HOME/tiaki/rules/tiaki.yaml
3. /usr/share/tiaki/rules/tiaki.yaml
4. Compiled-in minimal fallback

Packagers should install rules/tiaki.yaml to /usr/share/tiaki/rules/tiaki.yaml. Users can override it by copying the file to $XDG_CONFIG_HOME/tiaki/rules/tiaki.yaml.

Usage notes

• Review: The existing paru-style PKGBUILD review/pager flow still runs after the audit output.
• AI analysis runs only on packages with diffs (the normal review set).
• OSV is best-effort; missing results do not block installation.
• Man pages: tiaki(8) and tiaki.conf(5) document all options.
• Color: Enable color in pacman.conf for color output.

Shell completions

Completions for bash, fish, and zsh are included in completions/.

Contributing

See CONTRIBUTING.md.

License

Tiaki is licensed under the GPL-3.0. See LICENSE.