mirror of
https://github.com/lunchcat/sif.git
synced 2026-07-28 14:37:01 -07:00
TigahandGitHub
e2da1bc5d8
paths was typed as a map of operation structs, so a spec with a $ref string path item (valid in openapi 3.1) failed to decode and the whole spec was dropped with no finding. decode path items into a generic tree and extract per-operation security manually, treating a non-array security value as absent so it inherits the global default rather than being reported as an anonymous endpoint.