me-viper / OpaDotNet / 41421468281

88%

push

github

fix: Match OPA handling of bare IPs in net.cidr_* built-ins

- net.cidr_contains_matches: treat a bare IP as a single host (/32 or
  /128) instead of a /24 network, so it matches CIDRs longer than /24.
- net.cidr_merge: use Go's classful default mask for bare IPv4
  addresses and keep the address unmasked when nothing merges with it.
- net.cidr_expand: reject bare IP addresses like OPA does.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

27 of 28 new or added lines in 1 file covered. (96.43%)

4966 of 5646 relevant lines covered (87.96%)

0.88 hits per line