anchor.diff:    };
   
     buildInputs =
  -    lib.optional stdenv.isLinux (lib.getDev pcsclite)
  -    ++ lib.optionals stdenv.isDarwin [ PCSC ];
  +    lib.optional (stdenv.isLinux && pivKeySupport) (lib.getDev pcsclite)
  +    ++ lib.optionals (stdenv.isDarwin && pivKeySupport) [ PCSC ];
   
     nativeBuildInputs = [ pkg-config ];
   
  
positive.code: { stdenv, lib, buildGoModule, fetchFromGitHub, pcsclite, pkg-config, PCSC }:
  
  buildGoModule rec {
    pname = "cosign";
  
negative.code: 
    subPackages = [ "cmd/cosign" ];
  
    preBuild = ''
      buildFlagsArray+=(${lib.optionalString pivKeySupport "-tags=pivkey"})
    '';
    ldflags = [ "-s" "-w" "-X github.com/sigstore/cosign/cmd/cosign/cli.gitVersion=v${version}"];
  
    meta = with lib; {
  