anchor.diff:    ldflags = [
       "-s"
       "-w"
  -    "-X github.com/sigstore/fulcio/pkg/api.gitVersion=v${version}"
  -    "-X github.com/sigstore/fulcio/pkg/api.gitTreeState=clean"
  +    "-X github.com/sigstore/fulcio/pkg/server.gitVersion=v${version}"
  +    "-X github.com/sigstore/fulcio/pkg/server.gitTreeState=clean"
     ];
   
     # ldflags based on metadata from git and source
     preBuild = ''
  -    ldflags+=" -X github.com/sigstore/fulcio/pkg/api.gitCommit=$(cat COMMIT)"
  -    ldflags+=" -X github.com/sigstore/fulcio/pkg/api.buildDate=$(cat SOURCE_DATE_EPOCH)"
  +    ldflags+=" -X github.com/sigstore/fulcio/pkg/server.gitCommit=$(cat COMMIT)"
  +    ldflags+=" -X github.com/sigstore/fulcio/pkg/server.buildDate=$(cat SOURCE_DATE_EPOCH)"
     '';
   
     preCheck = ''
  
positive.code: 
  buildGoModule rec {
    pname = "fulcio";
    version = "0.4.1";
  
    src = fetchFromGitHub {
      owner = "sigstore";
      repo = pname;
      rev = "v${version}";
      sha256 = "sha256-b+2M28cI+4UkzrIqI+BioxJsGqT0pqJVPTPmXe+NsZo=";
      # populate values that require us to use git. By doing this in postFetch we
      # can delete .git afterwards and maintain better reproducibility of the src.
      leaveDotGit = true;
  
negative.code:       find "$out" -name .git -print0 | xargs -0 rm -rf
      '';
    };
    vendorSha256 = "sha256-L+20HvkRAs00tbD5q1ATeLrKoa7VFQlrXChh7AtK0PI=";
  
    nativeBuildInputs = [ installShellFiles ];
  
  