anchor.diff:  
       ln -sf $out/codeql/tools/linux64/lib64trace.so $out/codeql/tools/linux64/libtrace.so
   
  -    sed -i 's;"$CODEQL_DIST/tools/$CODEQL_PLATFORM/java/bin/java";"${jdk11}/bin/java";' $out/codeql/codeql
  +    sed -i 's%\$CODEQL_DIST/tools/\$CODEQL_PLATFORM/java%\${jdk11}%g' $out/codeql/codeql
   
       ln -s $out/codeql/codeql $out/bin/
     '';
  
positive.code: 
    src = fetchzip {
      url = "https://github.com/github/codeql-cli-binaries/releases/download/v${version}/codeql.zip";
      sha256 = "sha256-r3Jm+VYjn0Dz4BCSbADbgTWL1owbyIXlkoj6mOmZcZk=";
    };
  
    nativeBuildInputs = [
  
negative.code: 
  stdenv.mkDerivation rec {
    pname = "codeql";
    version = "2.6.2";
  
    dontConfigure = true;
    dontBuild = true;
  