anchor.diff:  
   buildGoModule rec {
     pname = "grype";
  -  version = "0.37.0";
  +  version = "0.39.0";
   
     src = fetchFromGitHub {
       owner = "anchore";
       repo = pname;
       rev = "v${version}";
  -    sha256 = "sha256-LcJtEzwChafG269cGZV3iBSlkjQSGIxSMZNj/5HbXVw=";
  +    hash = "sha256-Lmklcal39jbvwkJaUit3JTmafa26oDx25WzW1oQUSoc=";
       # populate values that require us to use git. By doing this in postFetch we
       # can delete .git afterwards and maintain better reproducibility of the src.
       leaveDotGit = true;
  
positive.code:     '';
      license = with licenses; [ asl20 ];
      maintainers = with maintainers; [ fab jk ];
    };
  }
  
negative.code:     '';
    };
  
    vendorSha256 = "sha256-fIxVkJSREZ86KW1SMJqHSByHFTdyJfSiestIZCMsnJI=";
  
    nativeBuildInputs = [
      installShellFiles
  