From a322b7b5aa502bc45abaad4b50c38c8baeff51c2 Mon Sep 17 00:00:00 2001
From: Anish Pallati <i@anish.land>
Date: Sat, 11 Jul 2026 18:13:13 -0400
Subject: [PATCH] gittuf: add versionCheckHook and update script

Signed-off-by: Anish Pallati <i@anish.land>
---
 pkgs/by-name/gi/gittuf/package.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/pkgs/by-name/gi/gittuf/package.nix b/pkgs/by-name/gi/gittuf/package.nix
index 147f39266e07..f108db4750be 100644
--- a/pkgs/by-name/gi/gittuf/package.nix
+++ b/pkgs/by-name/gi/gittuf/package.nix
@@ -6,6 +6,8 @@
   gnupg,
   less,
   openssh,
+  versionCheckHook,
+  nix-update-script,
 }:
 
 buildGoModule (finalAttrs: {
@@ -36,6 +38,12 @@ buildGoModule (finalAttrs: {
 
   postInstall = "rm $out/bin/cli $out/bin/sandbox"; # remove gendoc helper binaries
 
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "version";
+  doInstallCheck = true;
+
+  passthru.updateScript = nix-update-script { };
+
   meta = {
     changelog = "https://github.com/gittuf/gittuf/blob/${finalAttrs.src.tag}/CHANGELOG.md";
     description = "Security layer for Git repositories";