(FWIW, it turns out we do have one example analyzer in the

pulumi/pulumi

repo, though I'm not sure of its precise status: https://github.com/pulumi/pulumi/blob/master/examples/analyzers/infosec/main.go)