patching go dependencies in nix is hard

overlay.nix

(final: prev: {
  gh = prev.gh.overrideDerivation (old: {
    buildPhase =
      let
        patch =
          (final.fetchpatch2 {
            url = "https://github.com/zalando/go-keyring/commit/4e8623abca7e227443bc7e95dd1c0bdfc1490545.patch";
            sha256 = "sha256-TWaLoA9BpEzXYdguXjMxuQB9e3+QMKMTkxhJTSQeWJs=";
            extraPrefix = "vendor/github.com/zalando/go-keyring/";
            stripLen = 1;
          });
      in
      ''
        (
          set -x
          mv vendor vendor_
          cp -rL vendor_ vendor
          chmod -R u+w vendor
          patch -p1 < ${patch}
        )
        ${old.buildPhase}
      '';
  });
})