Get tag from VERSION manifest

Signed-off-by: Keshav Priyadarshi <[email protected]>

Author: keshav-space

setup.cfg

@@ -1,6 +1,6 @@
 [metadata]
 name = vulnerablecode
-version = 36.1.0
+version = 36.1.2
 license = Apache-2.0 AND CC-BY-SA-4.0
 
 # description must be on ONE line https://github.com/pypa/setuptools/issues/1390

vulnerabilities/models.py

@@ -2005,7 +2005,7 @@ def set_vulnerablecode_version_and_commit(self):
             msg = f"Field vulnerablecode_version already set to {self.vulnerablecode_version}"
             raise ValueError(msg)
 
-        self.vulnerablecode_version = VULNERABLECODE_VERSION
+        self.vulnerablecode_version = vulnerablecode.get_git_tag()
         self.vulnerablecode_commit = vulnerablecode.get_short_commit()
         self.save(update_fields=["vulnerablecode_version", "vulnerablecode_commit"])
 

vulnerablecode/__init__.py

@@ -14,7 +14,7 @@
 
 import git
 
-__version__ = "36.1.0"
+__version__ = "36.1.2"
 
 
 PROJECT_DIR = Path(__file__).resolve().parent
@@ -49,6 +49,29 @@ def get_git_commit_from_version_file():
         return
 
 
+def get_git_tag_from_version_file():
+    """Return the tag from the ".VERSION" file."""
+    version_file = ROOT_DIR / ".VERSION"
+    if not version_file.exists():
+        return
+
+    try:
+        lines = version_file.read_text().splitlines()
+        ref_line = lines[0]
+        if "tag:" in ref_line:
+            if vcio_tag := ref_line.split("tag:")[-1].strip():
+                return vcio_tag
+    except (UnicodeDecodeError):
+        return
+
+
+def get_git_tag():
+    """Return the tag from the ".VERSION" file or __version__."""
+    if vcio_tag := get_git_tag_from_version_file():
+        return vcio_tag
+    return __version__
+
+
 def get_short_commit():
     """
     Return the short commit hash from the .VERSION file or from `git describe`