anchor.diff:  
     src = fetchzip {
       url = "https://github.com/github/codeql-cli-binaries/releases/download/v${version}/codeql.zip";
  -    sha256 = "sha256-r3Jm+VYjn0Dz4BCSbADbgTWL1owbyIXlkoj6mOmZcZk=";
  +    sha256 = "096w9w52rj854i7rmpgy99k9z9ja2dfvj2d02dnpagwd7pc6a6bl";
     };
   
     nativeBuildInputs = [
  
positive.code: 
  stdenv.mkDerivation rec {
    pname = "codeql";
    version = "2.5.9";
  
    dontConfigure = true;
    dontBuild = true;
  
negative.code: 
      ln -sf $out/codeql/tools/linux64/lib64trace.so $out/codeql/tools/linux64/libtrace.so
  
      sed -i 's%\$CODEQL_DIST/tools/\$CODEQL_PLATFORM/java%\${jdk11}%g' $out/codeql/codeql
  
      ln -s $out/codeql/codeql $out/bin/
    '';
  