only install export as needed

Author: anthony-nhs

.github/workflows/quality-checks.yml

@@ -176,23 +176,29 @@ jobs:
       - name: convert python dependencies to requirements.txt
         if: ${{ steps.check_languages.outputs.uses_poetry == 'true' }}
         run: |
-          poetry self add poetry-plugin-export
+          POETRY_VERSION=$(poetry --version | awk '{print $3}')
+
+          if [[ "$(printf '%s\n' "2.0.0" "$POETRY_VERSION" "3.0.0" | sort -V | head -n1)" == "2.0.0" ]] \
+            && [[ "$(printf '%s\n' "$POETRY_VERSION" "3.0.0" | sort -V | head -n1)" == "$POETRY_VERSION" ]]; then
+              echo "Poetry version $POETRY_VERSION is >=2.0.0 and <3.0.0 - installing plugin-export"
+              poetry self add poetry-plugin-export
+          else
+              echo "Poetry version $POETRY_VERSION is outside the required range so not installing plugin-export"
+          fi
           poetry export -f requirements.txt --with dev --without-hashes --output=requirements.txt
           cat requirements.txt
       - name: Check python licenses
-        uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8
         if: ${{ steps.check_languages.outputs.uses_poetry == 'true' }}
-        with:
-          scan-type: "fs"
-          skip-files: "**/package-lock.json,**/go.sum,**/pom.xml,**/poetry.lock"
-          scan-ref: "."
-          severity: "CRITICAL,HIGH"
-          scanners: "license"
-          format: "table"
-          output: "license_scan_python.txt"
-          exit-code: "1"
-          list-all-pkgs: "false"
-          trivy-config: trivy.yaml
+        run: |
+          trivy fs \
+            --skip-files "**/package-lock.json,**/go.sum,**/pom.xml" \
+            --severity CRITICAL,HIGH \
+            --scanners license \
+            --format table \
+            --output license_scan_python.txt \
+            --exit-code 1 \
+            --config trivy.yaml \
+            .
         env:
           VIRTUAL_ENV: "./.venv/"
       - name: remove requirements.txt