anchor.diff:        grep -rlZ /bin src/main/java/com/google/devtools | while IFS="" read -r -d "" path; do
           # If you add more replacements here, you must change the grep above!
           # Only files containing /bin are taken into account.
  +        # We default to python3 where possible. See also `postFixup` where
  +        # python3 is added to $out/nix-support
           substituteInPlace "$path" \
             --replace /bin/bash ${customBash}/bin/bash \
             --replace "/usr/bin/env bash" ${customBash}/bin/bash \
  
positive.code:     echo "${customBash} ${defaultShellPath}" >> $out/nix-support/depends
      # The templates get tar’d up into a .jar,
      # so nix can’t detect python is needed in the runtime closure
      echo "${python3}" >> $out/nix-support/depends
    '' + lib.optionalString stdenv.isDarwin ''
      echo "${cctools}" >> $out/nix-support/depends
  
negative.code: 
      genericPatches = ''
        # Substitute j2objc and objc wrapper's python shebang to plain python path.
        # These scripts explicitly depend on Python 2.7, hence we use python27.
        # See also `postFixup` where python27 is added to $out/nix-support
        substituteInPlace tools/j2objc/j2objc_header_map.py --replace "$!/usr/bin/python2.7" "#!${python27}/bin/python"
        substituteInPlace tools/j2objc/j2objc_wrapper.py --replace "$!/usr/bin/python2.7" "#!${python27}/bin/python"
        substituteInPlace tools/objc/j2objc_dead_code_pruner.py --replace "$!/usr/bin/python2.7" "#!${python27}/bin/python"
  