Download
SCANOSS SBOM Workbench is a free, open-source graphical application designed for analyzing software source code and identifying third-party components. It uses the SCANOSS API to scan project directories and detect open-source code dependencies. The software helps developers examine licensing information and investigate potential compliance issues. Users can review identified components and generate software bills of materials in SPDX-Lite format. It also supports identifying cryptographic algorithms and libraries through configurable detection rules. Advanced settings allow administrators to adjust scanning concurrency, API timeouts, and network proxy configurations. Built with Electron, the application provides a multilingual interface for software composition analysis and source code auditing.
Features
- Source code scanning with automated open-source component identification
- Software license analysis for evaluating third-party code compliance
- SPDX-Lite software bill of materials generation from scanned projects
- Cryptographic algorithm and library detection with customizable JSON rules
- Configurable scanning concurrency, API timeouts, and network proxy settings
- Multilingual desktop interface with SCANOSS API integration and audit workflows
Project Samples
