anchor.diff: -{ stdenv, lib, buildGoModule, fetchFromGitHub, pcsclite, pkg-config, PCSC }:
  +{ stdenv, lib, buildGoModule, fetchFromGitHub, pcsclite, pkg-config, PCSC, pivKeySupport ? true }:
   
   buildGoModule rec {
     pname = "cosign";
  
positive.code:   };
  
    buildInputs =
      lib.optional stdenv.isLinux (lib.getDev pcsclite)
      ++ lib.optionals stdenv.isDarwin [ PCSC ];
  
    nativeBuildInputs = [ pkg-config ];
  
  
negative.code: 
    subPackages = [ "cmd/cosign" ];
  
    preBuild = ''
      buildFlagsArray+=(${lib.optionalString pivKeySupport "-tags=pivkey"})
    '';
    ldflags = [ "-s" "-w" "-X github.com/sigstore/cosign/cmd/cosign/cli.gitVersion=v${version}"];
  
    meta = with lib; {
  