anchor.diff:      "mirror://gnupg/gnupg/gnupg-${version}.tar.bz2"
     ];
   
  -  version = "2.2.7";
  +  version = "2.2.8";
   in
   stdenv.mkDerivation rec {
     name = "gnupg-${version}";
  
positive.code:   passthru = {
      srcVerification = fetchurl rec {
        failEarly = true;
        urls = tarballUrls "2.2.7";
        pgpsigUrl = map (n: "${n}.sig") urls;
        pgpKeyFingerprints = [
          "D869 2123 C406 5DEA 5E0F  3AB5 249B 39D2 4F25 E3B6"
  
negative.code:   src = fetchurl {
      urls = tarballUrls version;
      hashOutput = false;
      sha256 = "777b4cb8ced21965a5053d4fa20fe11484f0a478f3d011cef508a1a49db50dcd";
    };
  
    nativeBuildInputs = [
  