anchor.diff:      '';
       license = with licenses; [ asl20 ];
       maintainers = with maintainers; [ fab jk ];
  +    # Need updated macOS SDK
  +    # https://github.com/NixOS/nixpkgs/issues/101229
  +    broken = (stdenv.isDarwin && stdenv.isx86_64);
     };
   }
  
positive.code: 
  buildGoModule rec {
    pname = "grype";
    version = "0.37.0";
  
    src = fetchFromGitHub {
      owner = "anchore";
      repo = pname;
      rev = "v${version}";
      sha256 = "sha256-LcJtEzwChafG269cGZV3iBSlkjQSGIxSMZNj/5HbXVw=";
      # populate values that require us to use git. By doing this in postFetch we
      # can delete .git afterwards and maintain better reproducibility of the src.
      leaveDotGit = true;
  
negative.code:     '';
    };
  
    vendorSha256 = "sha256-fIxVkJSREZ86KW1SMJqHSByHFTdyJfSiestIZCMsnJI=";
  
    nativeBuildInputs = [
      installShellFiles
  