Set OSV User-Agent for scorecard cli and cron workers.

Signed-off-by: kash2104 <kparikh1104@gmail.com>

Author: kash2104

cron/internal/worker/main.go

@@ -25,7 +25,9 @@ import (
 	_ "net/http/pprof" //nolint:gosec
 	"strings"
 
+	"github.com/google/osv-scanner/pkg/osv"
 	"go.opencensus.io/stats/view"
+	"sigs.k8s.io/release-utils/version"
 
 	"github.com/ossf/scorecard/v5/checker"
 	"github.com/ossf/scorecard/v5/clients"
@@ -325,6 +327,8 @@ func startMetricsExporter() (monitoring.Exporter, error) {
 }
 
 func main() {
+	info := version.GetVersionInfo()
+	osv.RequestUserAgent = fmt.Sprintf("scorecard-cron/%s", info.GitVersion)
 	flag.Parse()
 	if err := config.ReadConfig(); err != nil {
 		panic(err)

go.mod

@@ -41,6 +41,7 @@ require (
 	github.com/caarlos0/env/v6 v6.10.1
 	github.com/gobwas/glob v0.2.3
 	github.com/google/go-github/v53 v53.2.0
+	github.com/google/osv-scanner v1.9.2
 	github.com/google/osv-scanner/v2 v2.2.4
 	github.com/hmarr/codeowners v1.2.1
 	github.com/in-toto/attestation v1.1.2

go.sum

@@ -537,6 +537,8 @@ github.com/google/martian/v3 v3.3.3 h1:DIhPTQrbPkgs2yJYdXU/eNACCG5DVQjySNRNlflZ9
 github.com/google/martian/v3 v3.3.3/go.mod h1:iEPrYcgCF7jA9OtScMFQyAlZZ4YXTKEtJ1E6RWzmBA0=
 github.com/google/osv-scalibr v0.3.7-0.20251023161426-90e9ac9cc1b3 h1:JNLsaIi+lHdzsKoxcDmMBZCbE/qKi/mt9N3eQRxrThc=
 github.com/google/osv-scalibr v0.3.7-0.20251023161426-90e9ac9cc1b3/go.mod h1:XN3PWSKiShu3MXb+9nGtwLGHWXarZ/0lfbovOhPKTRc=
+github.com/google/osv-scanner v1.9.2 h1:N5Arl9SA75afbjmX8mKURgOIaKyuK3NUjCaxDlj1KHI=
+github.com/google/osv-scanner v1.9.2/go.mod h1:ZTL8Dp9z/7Jr9kkQSOGqo8z6Csqt83qMIr58aZVx+pM=
 github.com/google/osv-scanner/v2 v2.2.4 h1:VMaaQ+ZlMPxeIVNa9+Gnabac89+QvUsDWCMv4jfNhDY=
 github.com/google/osv-scanner/v2 v2.2.4/go.mod h1:283VGGCrxkTa54P0FArsparfNzHdllI5UH4DwlLhobs=
 github.com/google/pprof v0.0.0-20181206194817-3ea8567a2e57/go.mod h1:zfwlbNMJ+OItoe0UupaVj+oy1omPYYDuagoSzA8v9mc=
@@ -806,6 +808,8 @@ github.com/otiai10/copy v1.14.1 h1:5/7E6qsUMBaH5AnQ0sSLzzTg1oTECmcCmT6lvF45Na8=
 github.com/otiai10/copy v1.14.1/go.mod h1:oQwrEDDOci3IM8dJF0d8+jnbfPDllW6vUjNc3DoZm9I=
 github.com/otiai10/mint v1.6.3 h1:87qsV/aw1F5as1eH1zS/yqHY85ANKVMgkDrf9rcxbQs=
 github.com/otiai10/mint v1.6.3/go.mod h1:MJm72SBthJjz8qhefc4z1PYEieWmy8Bku7CjcAqyUSM=
+github.com/owenrumney/go-sarif/v2 v2.3.3 h1:ubWDJcF5i3L/EIOER+ZyQ03IfplbSU1BLOE26uKQIIU=
+github.com/owenrumney/go-sarif/v2 v2.3.3/go.mod h1:MSqMMx9WqlBSY7pXoOZWgEsVB4FDNfhcaXDA1j6Sr+w=
 github.com/owenrumney/go-sarif/v3 v3.2.3 h1:n6mdX5ugKwCrZInvBsf6WumXmpAe3mbmQXgkXlIq34U=
 github.com/owenrumney/go-sarif/v3 v3.2.3/go.mod h1:1bV7t8SZg7pX41spaDkEUs8/yEjzk9JapztMoX1XNjg=
 github.com/package-url/packageurl-go v0.1.3 h1:4juMED3hHiz0set3Vq3KeQ75KD1avthoXLtmE3I0PLs=

main.go

@@ -16,13 +16,19 @@
 package main
 
 import (
+	"fmt"
 	"log"
 
+	"github.com/google/osv-scanner/pkg/osv"
+	"sigs.k8s.io/release-utils/version"
+
 	"github.com/ossf/scorecard/v5/cmd"
 	"github.com/ossf/scorecard/v5/options"
 )
 
 func main() {
+	info := version.GetVersionInfo()
+	osv.RequestUserAgent = fmt.Sprintf("scorecard-cron/%s", info.GitVersion)
 	opts := options.New()
 	if err := cmd.New(opts).Execute(); err != nil {
 		log.Fatalf("error during command execution: %v", err)