ClearlyDefined vs SBOM Workbench
ClearlyDefined
clearlydefined.ioSBOM Workbench
scanoss.readthedocs.ioSide by side
| Figure | ClearlyDefined | SBOM Workbench |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| API | Yes | — |
| Self-hosted | Yes | — |
| Plans published | 1 | 1 |
| Spec score · Open Source License Compliance Software | 8.0 (#10) | 7.5 (#22) |
| Integrations | The documented provider list includes GitHub, Maven Central, NpmJS, NuGet, GitLab, crates.io, and other package providers. | The maker lists pre-commit hooks, Actions, pipelines and webhooks among its integrations; Bitbucket is marked coming soon. |
| Purpose | ClearlyDefined is an open source project that crowdsources the gathering, curation, and upstreaming of licensing, security, and other data about free and open source projects. | SBOM Workbench is a graphical interface for scanning and auditing source code using the SCANOSS API. |
Plans
In their own words
ClearlyDefined
ClearlyDefined has no write-up on Specifiction yet; its figures are above.
SBOM Workbench
SBOM Workbench is a graphical tool for scanning and auditing source code through the SCANOSS API. It identifies open-source components, including undeclared code that may not appear in dependency manifests, and the free version identifies licenses and security vulnerabilities. It generates SPDX-Lite software bills of materials; release notes also list CycloneDX, SPDX Lite, CSV, and HTML exports. The tool is aimed at developers and runs on Linux, macOS, and Windows. Its CLI can use multiple SCANOSS API endpoints, including custom servers. Listed integrations include pre-commit hooks, Actions, pipelines, and webhooks, while Bitbucket is marked as coming soon. Repository documentation describes a collaborative workspace. The distributed software is described by SCANOSS as open source, and the Workbench has a public GitHub repository. Cryptographic algorithm identification is a premium feature, not included in the free Workbench. It is free to download, and SCANOSS directs support requests to email. Paid SCANOSS subscription prices listed for other offerings are not Workbench prices.