]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commitdiff
linux: cve-exclusions: Add --always to git-describe
authorAlexander Sverdlin <alexander.sverdlin@siemens.com>
Tue, 10 Mar 2026 14:07:46 +0000 (15:07 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Mon, 16 Mar 2026 17:05:37 +0000 (17:05 +0000)
Otherwise https://git.kernel.org/pub/scm/linux/security/vulns.git cannot be
used:

subprocess.CalledProcessError: Command '('git', 'describe', '--tags', 'HEAD')' returned non-zero exit status 128.

Original error from git:

fatal: No names found, cannot describe anything.

The change will at least produce an abbreviated SHA1 hash as {data_version}.

Fixes: 5e66e2b79fae ("linux/generate-cve-exclusions: show the name and version of the data source")
Signed-off-by: Alexander Sverdlin <alexander.sverdlin@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-kernel/linux/generate-cve-exclusions.py

index dfc16663a5830b88fe0a6636ed59c5086ada9e39..5139b110558fca8ff9f6553dfe8112f6220145bb 100755 (executable)
@@ -97,7 +97,7 @@ def main(argp=None):
     version = args.version
     base_version = Version(f"{version.major}.{version.minor}")
 
-    data_version = subprocess.check_output(("git", "describe", "--tags", "HEAD"), cwd=datadir, text=True)
+    data_version = subprocess.check_output(("git", "describe", "--tags", "--always", "HEAD"), cwd=datadir, text=True)
 
     print(f"""
 # Auto-generated CVE metadata, DO NOT EDIT BY HAND.