Update github action version

.goreleaser.yml

@@ -30,6 +30,25 @@ builds:
       # Further testing before supporting arm
       # - arm
       - arm64
+  - main: ./cmd/osv-scanner/
+    id: osv-scanner-action
+    binary: osv-scanner-action
+    env:
+      # goreleaser does not work with CGO, it could also complicate
+      # usage by users in CI/CD systems like Terraform Cloud where
+      # they are unable to install libraries.
+      - CGO_ENABLED=0
+      - GO111MODULE=on
+    mod_timestamp: "{{ .CommitTimestamp }}"
+    flags:
+      - -trimpath
+    ldflags:
+      # prettier-ignore
+      - '-s -w -X github.com/google/osv-scanner/internal/version.OSVVersion={{.Version}}_GHAction -X main.commit={{.Commit}} -X main.date={{.CommitDate}}'
+    goos:
+      - linux
+    goarch:
+      - amd64
   - main: ./cmd/osv-reporter/
     id: osv-reporter
     binary: osv-reporter

goreleaser-action.dockerfile

@@ -21,8 +21,9 @@ RUN apk --no-cache add \
 # Allow git to run on mounted directories
 RUN git config --global --add safe.directory '*'
 
+# Built binaries provided by goreleaser
 WORKDIR /root/
-COPY ./osv-scanner ./
+COPY ./osv-scanner-action ./osv-scanner
 COPY ./osv-reporter ./
 COPY ./exit_code_redirect.sh ./
 

pkg/osvscanner/osvscanner.go

@@ -16,6 +16,7 @@ import (
 	"github.com/google/osv-scanner/internal/output"
 	"github.com/google/osv-scanner/internal/sbom"
 	"github.com/google/osv-scanner/internal/semantic"
+	"github.com/google/osv-scanner/internal/version"
 	"github.com/google/osv-scanner/pkg/config"
 	"github.com/google/osv-scanner/pkg/depsdev"
 	"github.com/google/osv-scanner/pkg/lockfile"
@@ -922,7 +923,7 @@ func makeRequest(
 	}
 
 	if osv.RequestUserAgent == "" {
-		osv.RequestUserAgent = "osv-scanner-api"
+		osv.RequestUserAgent = "osv-scanner-api_v" + version.OSVVersion
 	}
 
 	resp, err := osv.MakeRequest(query)