anchor.diff:    postPatch = ''
       substituteInPlace pyproject.toml \
         --replace 'prettytable = "^3.1.1"' 'prettytable = "*"' \
  -      --replace 'pysigma = "^0.5.0"' 'pysigma = "*"'
  +      --replace 'pysigma = "^0.7.2"' 'pysigma = "*"'
     '';
   
     pythonImportsCheck = [
  
positive.code:     click
      prettytable
      pysigma
      pysigma-backend-splunk
      pysigma-backend-insightidr
      pysigma-pipeline-crowdstrike
      pysigma-pipeline-sysmon
      pysigma-pipeline-windows
  
negative.code: 
  python3.pkgs.buildPythonApplication rec {
    pname = "sigma-cli";
    version = "0.5.0";
    format = "pyproject";
  
    src = fetchFromGitHub {
      owner = "SigmaHQ";
      repo = pname;
      rev = "refs/tags/v${version}";
      hash = "sha256-i0rin4TLoqo+F2nWG4kcFp3x/cRtkMzAo5Ldyo0Si5w=";
    };
  
    nativeBuildInputs = with python3.pkgs; [
  