diff --git a/pkgs/by-name/si/sigsum/package.nix b/pkgs/by-name/si/sigsum/package.nix
index b1264add0f63..8a0eb178efb6 100644
--- a/pkgs/by-name/si/sigsum/package.nix
+++ b/pkgs/by-name/si/sigsum/package.nix
@@ -37,7 +37,9 @@ buildGoModule (finalAttrs: {
   versionCheckProgram = "${placeholder "out"}/bin/sigsum-key";
   doInstallCheck = true;
 
-  passthru.updateScript = nix-update-script { };
+  passthru.updateScript = nix-update-script {
+    extraArgs = [ "--version-regex=^v(\\d+\\.\\d+\\.\\d+)$" ];
+  };
 
   meta = {
     description = "System for public and transparent logging of signed checksums";