Checkov's OIDC Bug: Why CKV_AWS_358 Misses 80% of Misconfigurations

If you're using Checkov to audit your AWS IAM OIDC trust policies, you might assume you're covered....