ci: skip long tests if sbom too

Author: terriko

.github/workflows/testing.yml

@@ -75,9 +75,9 @@ jobs:
           python-version: ${{ matrix.python }}
           cache: 'pip'
 
-      - name: "Set flag from Commit"
+      - name: "Skip tests if this is an automated sbom job"
         env:
-          COMMIT_VAR: ${{ startsWith(github.head_ref, 'chore-sbom-py') }}
+          COMMIT_VAR: ${{ startsWith(github.head_ref, 'chore-sbom-py') && github.event.pull_request.user.login == 'github-actions[bot]' }}
         run: |
           if ${COMMIT_VAR} == true; then
             echo "sbom=true" >> $GITHUB_ENV
@@ -87,10 +87,6 @@ jobs:
             echo "sbom set to false"
           fi
 
-      - name: "Is this an sbom?"
-        if: env.sbom
-        run: echo "Yes, don't run tests"
-
       - name: Get date
         id: get-date
         run: |
@@ -176,6 +172,19 @@ jobs:
         with:
           python-version: '3.10'
           cache: 'pip'
+
+      - name: "Skip tests if this is an automated sbom job"
+        env:
+          COMMIT_VAR: ${{ startsWith(github.head_ref, 'chore-sbom-py') && github.event.pull_request.user.login == 'github-actions[bot]' }}
+        run: |
+          if ${COMMIT_VAR} == true; then
+            echo "sbom=true" >> $GITHUB_ENV
+            echo "sbom set to true"
+          else
+            echo "sbom=false" >> $GITHUB_ENV
+            echo "sbom set to false"
+          fi
+
       - name: Get date
         id: get-date
         run: |
@@ -214,10 +223,13 @@ jobs:
           if_true: '1'
           if_false: '0'
       - name: Install cabextract
+        if: env.sbom == false
         run: sudo apt-get update && sudo apt-get install cabextract
       - name: Install OS dependencies for testing PDF
+        if: env.sbom == false
         run: sudo apt-get install build-essential libpoppler-cpp-dev pkg-config python3-dev
       - name: Install pdftotext, reportlab and cve-bin-tool
+        if: env.sbom == false
         run: |
           python -m pip install --upgrade pip
           python -m pip install --upgrade setuptools
@@ -227,11 +239,13 @@ jobs:
           python -m pip install --upgrade -r dev-requirements.txt
           python -m pip install --editable .
       - name: Try single CLI run of tool
+        if: env.sbom == false
         run: |
           [[ -e cache ]] && mkdir -p .cache && mv cache ~/.cache/cve-bin-tool
           NO_EXIT_CVE_NUM=1 python -m cve_bin_tool.cli test/assets/test-kerberos-5-1.15.1.out
           cp -r ~/.cache/cve-bin-tool cache
       - name: Run async tests
+        if: env.sbom == false
         env:
           LONG_TESTS: ${{ steps.git-diff.outputs.value }}
         run: >
@@ -242,13 +256,15 @@ jobs:
           --ignore=test/test_html.py
           --ignore=test/test_json.py
       - name: Run synchronous tests
+        if: env.sbom == false
         env:
           LONG_TESTS: ${{ steps.git-diff.outputs.value }}
         run: >
           pytest -v --cov --cov-append --cov-report=xml
           test/test_cli.py
           test/test_cvedb.py
       - name: Upload code coverage to codecov
+        if: env.sbom == false
         uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3.1.4
         with:
           files: ./coverage.xml