mirror of
https://github.com/mulgadc/spinifex.git
synced 2026-10-15 09:01:31 +00:00
a9a457489d
The seven sourcePolicyARN actions resolved to the PolicyArn the caller sent, so the gate decided against an ARN whose account the caller chose. The scope now takes the ARN's path and name and rebuilds it on the caller's account, as sourceOIDCARN beside it already does, and widens to account-wide when the ARN carries no policy component. Lands with the cross-tenant integration suite that found it.