anchor.diff:  
   buildGoModule rec {
     pname = "cosign";
  -  version = "1.3.1";
  +  version = "1.4.0";
   
     src = fetchFromGitHub {
       owner = "sigstore";
       repo = pname;
       rev = "v${version}";
  -    sha256 = "sha256-K9ZORbccEH7KV0XHkio/fl/5kvUInRCvzFY4QOqrgfg=";
  +    sha256 = "sha256-KavhcBxn0099ZSd7wdIfMYnYhbmuRpc7+FTfdm1T71c=";
     };
   
     buildInputs = lib.optional (stdenv.isLinux && pivKeySupport) (lib.getDev pcsclite)
  
positive.code:       --bash <($out/bin/cosign completion bash) \
        --fish <($out/bin/cosign completion fish) \
        --zsh <($out/bin/cosign completion zsh)
    '';
  
    meta = with lib; {
  
negative.code: 
    nativeBuildInputs = [ pkg-config installShellFiles ];
  
    vendorSha256 = "sha256-7fWSGj8Ex8nPpMr3Foryiu25gBvzeZfVeMwZ3QKsm8E=";
  
    excludedPackages = "\\(sample\\|webhook\\|help\\)";
  
  