[pathseeker]

>and being able to run static analysis tools against your infrastructure

Is the Pulumi/CDK code too dynamic to support static analysis?

[pm90]

HCL is declarative whereas a general purpose language is imperative, which makes static analysis much harder.