generated: '2026-07-21'
method: searched
source: probed .well-known/ paths on Seqera hosts
notes: 'cloud.seqera.io/.well-known/security.txt and /openid-configuration return HTTP 200

  but serve the Angular SPA index.html (text/html), not real well-known documents, so

  they are not captured. No /oauth-authorization-server, /api-catalog, or /ai-plugin.json

  found on api.cloud.seqera.io (all 404). The Seqera API uses HTTP bearer (JWT access

  token) auth, not OAuth/OIDC discovery.

  '
hosts:
- host: ''
  documents:
  - path: https://seqera.io/.well-known/security.txt
    status: 200
    file: seqera-labs-security.txt
    type: SecurityTxt
x-shape-fix:
  converted: '2026-08-20'
  from: entries
  note: Rewritten into hosts[] -> documents[], the only shape well_known_docs() in score.rb reads. A served
    .well-known surface recorded in any other shape scores as absent.