From 7828982168d51cb166f40d1044b1154836a77e8f Mon Sep 17 00:00:00 2001
From: Roman Lutz <romanlutz13@gmail.com>
Date: Wed, 17 Jan 2024 12:04:25 -0500
Subject: [PATCH] add requirements.txt generation stept before component
 governance

---
 component-governance.yml | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/component-governance.yml b/component-governance.yml
index 3f2d1c979c..9f0cdbd31d 100644
--- a/component-governance.yml
+++ b/component-governance.yml
@@ -1,4 +1,7 @@
 # Run Component Governance to register all dependencies.
+# Component Detection with Poetry is currently in beta,
+# so as a workaround we generate the requirements.txt file
+# to help Component Governance detect the components.
 
 trigger:
   - main
@@ -7,4 +10,24 @@ pool:
   vmImage: "ubuntu-latest"
 
 steps:
+  - task: UsePythonVersion@0
+    inputs:
+      versionSpec: '3.10'
+    displayName: 'Use Python 3.10'
+
+  - script: |
+      curl -sSL https://install.python-poetry.org | python3 -
+    displayName: Install Poetry
+
+  - script: |
+      poetry install --with=dev
+    displayName: Create Poetry Environment
+
+  - task: CmdLine@2
+    displayName: 'Generate requirements.txt using poetry'
+    inputs:
+      script: |
+        poetry export --without-hashes --format=requirements.txt > requirements.txt
+        cat requirements.txt
+
   - task: ComponentGovernanceComponentDetection@0