{
  buildGoModule,
  fetchFromGitHub,
  docker,
  lib,
}:

buildGoModule rec {
  pname = "docker-sbom";
  version = "0.7.0";

  src = fetchFromGitHub {
    owner = "docker";
    repo = "sbom-cli-plugin";
    rev = "tags/v${version}";
    hash = "sha256-aKEew/5T4cIc3KiWaBxqFqTki/QSnfSAroZ9iO+orUA=";
  };

  patches = [
    # Disable tests that require a docker daemon to be running
    # in the sandbox
    ./sbom-disable-tests.patch
  ];

  vendorHash = "sha256-XPPVAdY2NaasZ9bkf24VWWk3X5pjnryvsErYIWkeekc=";

  nativeBuildInputs = [ docker ];

  installPhase = ''
    runHook preInstall
    install -D $GOPATH/bin/sbom-cli-plugin $out/libexec/docker/cli-plugins/docker-sbom

    mkdir -p $out/bin
    ln -s $out/libexec/docker/cli-plugins/docker-sbom $out/bin/docker-sbom
    runHook postInstall
  '';

  meta = {
    description = "Plugin for Docker CLI to support SBOM creation using Syft";
    mainProgram = "docker-sbom";
    homepage = "https://github.com/docker/sbom-cli-plugin";
    license = lib.licenses.asl20;
    maintainers = with lib.maintainers; [ raboof ];
  };
}