anchor.diff:        --zsh <($out/bin/syft completion zsh)
     '';
   
  +  doInstallCheck = true;
  +  installCheckPhase = ''
  +    runHook preInstallCheck
  +
  +    export SYFT_CHECK_FOR_APP_UPDATE=false
  +    $out/bin/syft --help
  +    $out/bin/syft version | grep "${version}"
  +
  +    runHook postInstallCheck
  +  '';
  +
     meta = with lib; {
       homepage = "https://github.com/anchore/syft";
       changelog = "https://github.com/anchore/syft/releases/tag/v${version}";
  
positive.code: 
  buildGoModule rec {
    pname = "syft";
    version = "0.45.1";
  
    src = fetchFromGitHub {
      owner = "anchore";
      repo = pname;
      rev = "v${version}";
      sha256 = "sha256-oexsu52x9rAqwTVxTVHzKPuaIfvg5lvvuBmKcnb2Yew=";
      # populate values that require us to use git. By doing this in postFetch we
      # can delete .git afterwards and maintain better reproducibility of the src.
      leaveDotGit = true;
  
negative.code:       find "$out" -name .git -print0 | xargs -0 rm -rf
      '';
    };
    vendorSha256 = "sha256-nb7QcdmwAfYDTzCFNjs7uKwK/gng2iMD36ANaFSsftk=";
  
    nativeBuildInputs = [ installShellFiles ];
  
    subPackages = [ "cmd/syft" ];
  
    ldflags = [
      "-s"
  