in rules/terraform_sensitive_variable_no_default.go [85:96]
func nullOrZeroDefaultValue(b *hclsyntax.Block) (bool, error) {
attr, set := b.Body.Attributes["default"]
if !set {
return true, nil
}
v, diag := attr.Expr.Value(&hcl.EvalContext{})
if diag.HasErrors() {
return false, diag
}
return v.Equals(cty.NullVal(cty.DynamicPseudoType)).True() ||
(v.CanIterateElements() && v.LengthInt() == 0), nil
}