anchor.diff:        find "$out" -name .git -print0 | xargs -0 rm -rf
       '';
     };
  -  vendorSha256 = "sha256-INPMsSyjFs4GyapOlc/k5fcI2ePUKgp4BtASOKwQhck=";
  +  vendorSha256 = "sha256-L+20HvkRAs00tbD5q1ATeLrKoa7VFQlrXChh7AtK0PI=";
   
     nativeBuildInputs = [ installShellFiles ];
   
  
positive.code:     unset subPackages
  
      # skip test that requires networking
      substituteInPlace pkg/config/config_test.go \
        --replace "TestLoad" "SkipLoad"
    '';
  
  
negative.code:   ldflags = [
      "-s"
      "-w"
      "-X github.com/sigstore/fulcio/pkg/server.gitVersion=v${version}"
      "-X github.com/sigstore/fulcio/pkg/server.gitTreeState=clean"
    ];
  
    # ldflags based on metadata from git and source
    preBuild = ''
      ldflags+=" -X github.com/sigstore/fulcio/pkg/server.gitCommit=$(cat COMMIT)"
      ldflags+=" -X github.com/sigstore/fulcio/pkg/server.buildDate=$(cat SOURCE_DATE_EPOCH)"
    '';
  
    preCheck = ''
  