From: Seth Michael Larson <seth@python.org>
Date: Mon, 2 Sep 2024 19:35:30 +0000 (-0500)
Subject: gh-123458: Skip SBOM generation if no git repository is detected (#123507)
X-Git-Tag: v3.14.0a1~609
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=db42934270c5c23be9f6804cad98dfd8234caf6f;p=thirdparty%2FPython%2Fcpython.git

gh-123458: Skip SBOM generation if no git repository is detected (#123507)
---

diff --git a/Tools/build/generate_sbom.py b/Tools/build/generate_sbom.py
index 88f311bf6b40..020f874cffea 100644
--- a/Tools/build/generate_sbom.py
+++ b/Tools/build/generate_sbom.py
@@ -93,6 +93,19 @@ def error_if(value: bool, error_message: str) -> None:
         sys.exit(1)
 
 
+def is_root_directory_git_index() -> bool:
+    """Checks if the root directory is a git index"""
+    try:
+        subprocess.check_call(
+            ["git", "-C", str(CPYTHON_ROOT_DIR), "rev-parse"],
+            stdout=subprocess.DEVNULL,
+            stderr=subprocess.DEVNULL,
+        )
+    except subprocess.CalledProcessError:
+        return False
+    return True
+
+
 def filter_gitignored_paths(paths: list[str]) -> list[str]:
     """
     Filter out paths excluded by the gitignore file.
@@ -338,6 +351,11 @@ def create_externals_sbom() -> None:
 
 
 def main() -> None:
+    # Don't regenerate the SBOM if we're not a git repository.
+    if not is_root_directory_git_index():
+        print("Skipping SBOM generation due to not being a git repository")
+        return
+
     create_source_sbom()
     create_externals_sbom()