Issue #27 Refinements to Getting Started docs

Author: DennisClark

docs/source/getting-started/create-sboms.rst

@@ -2,17 +2,18 @@
 
 Use AboutCode to create SBOMs for your products
 ===============================================
-
-You can use **ScanCode.io** to create SBOMs for your products. ScanCode.io will
-identify all the licenses associated with your codebase resources, highlighting the ones
-that need attention based on your policies. You can also use ScanCode.io to identify
-software vulnerabilities.
-
-You can also use **DejaCode** to create SBOMs for your products. Dejacode will enable
-you to review your product inventories, assert license conclusions, and record your
-analysis and actions related to any licenses that require attention. You can also
-record your analysis and actions related to any software vulnerabilities that you
-have discovered.
+You can use **ScanCode.io** to create an SBOM from a scanned package, codebase or
+product. ScanCode.io will identify all the licenses associated with the scanned object,
+highlighting the licenses that need attention based on your policies. You can also use
+ScanCode.io to identify software vulnerabilities. With its library of standard and
+custom pipelines, ScanCode.io performs a deep and comprehensive scanning to meet your
+analysis requirements.
+
+If you need to edit the results of a scan, **Dejacode** will enable you to import those
+results into a product, review your product inventories, assert license conclusions,
+and record your analysis and actions related to any licenses that require attention.
+You can also record your analysis and actions related to any software vulnerabilities
+that have been discovered. You can then use DejaCode to create SBOMs for your products.
 
 1. Install AboutCode Projects
 -----------------------------
@@ -64,26 +65,32 @@ https://dejacode.readthedocs.io/en/latest/dataspace.html#enable-vulnerablecodedb
     to integrate with the public version at https://public.vulnerablecode.io/
 
 
-2. Scan your codebases using ScanCode.io
-----------------------------------------
+2. Scan software using ScanCode.io
+----------------------------------
 
-Create new Projects in ScanCode.io to scan your codebases.
+Create new Projects in ScanCode.io to scan packages, codebases, or products. You can
+also load inventories (scan results) created by ScanCode-Toolkit. You can specify
+the exact pipelines to use for particular platforms and technologies.
 
 https://scancodeio.readthedocs.io/en/latest/user-interface.html#creating-a-new-project
 
-Export the results in the appropriate format to share with your team.
+Export the scan results in the appropriate format to share with your team. ScanCode.io
+will report details of the identified packages if you choose to export SBOMs.
 
 https://scancodeio.readthedocs.io/en/latest/output-files.html#output-files
 
 
 3. Import scan results to DejaCode products
 -------------------------------------------
 
-Create new Products in DejaCode for comprehensive analysis and action.
+Create new Products in DejaCode for comprehensive analysis and action. DejaCode allows
+you and your team members to edit a Product inventory as needed to assert license
+choices and conclusions, and to document your vulnerability status.
 
 https://dejacode.readthedocs.io/en/latest/tutorial-1.html
 
-Generate Attribution and SBOMs from DejaCode Products.
+Generate Attribution and SBOMs from DejaCode Products. You can generate SBOMs in both
+SPDX and CycloneDX (inlucing VEX) formats.
 
 https://dejacode.readthedocs.io/en/latest/tutorial-5-sboms.html#tutorial-5-working-with-sboms-in-a-product