Specify a user agent for OSV.dev

[spencerschrock]

The Scorecard weekly cron makes many API calls to osv.dev. The OSV team asked if we specify a unique user agent, and we don't.
It would be good to set one. There is a RequestUserAgent variable we can set in the osv package. https://pkg.go.dev/github.com/google/osv-scanner@v1.7.1/pkg/osv#pkg-variables.

osv-scanner sets user agents like:
osv-scanner/1.7.1 (where v1.7.1 is the osv-scanner version)

It would be nice if scorecard set a user agent for both our CLI (scorecard/{version}) and our weekly cron workers (scorecard-cron/{version}). We have version info available to the various binaries via version.GetVersionInfo

[krol3]

I will try to help with this issue.

[kash2104]

@spencerschrock I have opened the PR #4883 which resolves the issue.

[pranavs321]

Hi! I am a new LFX mentee for the Scorecard project and I've just completed the initial training. I'm very interested in working on this issue to specify the user agent for OSV.dev as my first contribution.

Could you please assign this to me? Also, if there are specific user-agent string formats you prefer, please let me know. Excited to help out!

[kash2104]

@pranavs321 Please go through the PR conversations.