diff --git a/hclsyntax/expression_test.go b/hclsyntax/expression_test.go index 6f761023..1af93dad 100644 --- a/hclsyntax/expression_test.go +++ b/hclsyntax/expression_test.go @@ -1397,6 +1397,26 @@ upper( }).Mark("sensitive"), 0, }, + { // splat with sensitive collection that's unknown + `maps.*.enabled`, + &hcl.EvalContext{ + Variables: map[string]cty.Value{ + "maps": cty.UnknownVal(cty.List(cty.Map(cty.Bool))).Mark("sensitive"), + }, + }, + cty.UnknownVal(cty.List(cty.Bool)).RefineNotNull().Mark("sensitive"), + 0, + }, + { // splat with sensitive collection that's unknown and not null + `maps.*.enabled`, + &hcl.EvalContext{ + Variables: map[string]cty.Value{ + "maps": cty.UnknownVal(cty.List(cty.Map(cty.Bool))).RefineNotNull().Mark("sensitive"), + }, + }, + cty.UnknownVal(cty.List(cty.Bool)).RefineNotNull().Mark("sensitive"), + 0, + }, { // splat with collection with sensitive elements `maps.*.x`, &hcl.EvalContext{