diff --git a/pkgs/by-name/be/bearer/package.nix b/pkgs/by-name/be/bearer/package.nix
index e47b2559b8a8..c3702dcd7457 100644
--- a/pkgs/by-name/be/bearer/package.nix
+++ b/pkgs/by-name/be/bearer/package.nix
@@ -2,43 +2,40 @@
   lib,
   buildGoModule,
   fetchFromGitHub,
-  testers,
-  bearer,
+  versionCheckHook,
 }:
 
-buildGoModule rec {
+buildGoModule (finalAttrs: {
   pname = "bearer";
-  version = "1.51.1";
+  version = "2.0.0";
 
   src = fetchFromGitHub {
     owner = "bearer";
     repo = "bearer";
-    tag = "v${version}";
-    hash = "sha256-s1AUVpmSJYRoidEH4qM4mHPsbTsn2Uo9HfcNG2oMIXA=";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-kWs8NiuOroKgQC0Duvef9O7TqQnqgEd28EQZVf4y4oQ=";
   };
 
-  vendorHash = "sha256-9OU0pqztGM5hmPCcMGCR6IdO/5XJE1MVcCCX+vH3us0=";
+  vendorHash = "sha256-uMu5CL/VAlSd2yZzbkr0ceQdUVJvhs9R+IoyZbtZPk8=";
 
   subPackages = [ "cmd/bearer" ];
 
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
   ldflags = [
     "-s"
     "-w"
-    "-X=github.com/bearer/bearer/cmd/bearer/build.Version=${version}"
+    "-X=github.com/bearer/bearer/cmd/bearer/build.Version=${finalAttrs.version}"
   ];
 
-  passthru.tests = {
-    version = testers.testVersion {
-      package = bearer;
-      command = "bearer version";
-    };
-  };
+  doInstallCheck = true;
 
   meta = {
     description = "Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks";
     homepage = "https://github.com/bearer/bearer";
-    changelog = "https://github.com/Bearer/bearer/releases/tag/v${version}";
-    license = with lib.licenses; [ elastic20 ];
+    changelog = "https://github.com/Bearer/bearer/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.elastic20;
     maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "bearer";
   };
-}
+})