diff --git a/pkgs/by-name/gi/gitleaks/package.nix b/pkgs/by-name/gi/gitleaks/package.nix
index fa17828c303c..063e64e2b333 100644
--- a/pkgs/by-name/gi/gitleaks/package.nix
+++ b/pkgs/by-name/gi/gitleaks/package.nix
@@ -5,22 +5,22 @@
   fetchFromGitHub,
   gitleaks,
   installShellFiles,
-  testers,
   nix-update-script,
+  versionCheckHook,
 }:
 
 buildGoModule rec {
   pname = "gitleaks";
-  version = "8.21.2";
+  version = "8.22.0";
 
   src = fetchFromGitHub {
     owner = "zricethezav";
     repo = "gitleaks";
     rev = "refs/tags/v${version}";
-    hash = "sha256-1MCSGFpjYD4XdES+kJTz/NTN/B00TWMQ1Rmk/nsKf2Q=";
+    hash = "sha256-f3dSKYRkXt/YT5PgFS7pclRcKvfGl2sFopqfJkEwnhw=";
   };
 
-  vendorHash = "sha256-iIgS0fXdiVMYKr3FZTYlCSEqqaH9sxZh1MFry9pGET8=";
+  vendorHash = "sha256-qjchUWWnG2CYXTM4aGkh+UgaJuPQ6yEpetXJ5ORqNuE=";
 
   ldflags = [
     "-s"
@@ -28,7 +28,10 @@ buildGoModule rec {
     "-X=github.com/zricethezav/gitleaks/v${lib.versions.major version}/cmd.Version=${version}"
   ];
 
-  nativeBuildInputs = [ installShellFiles ];
+  nativeBuildInputs = [
+    installShellFiles
+    versionCheckHook
+  ];
 
   # With v8 the config tests are blocking
   doCheck = false;
@@ -40,10 +43,7 @@ buildGoModule rec {
       --zsh <($out/bin/${pname} completion zsh)
   '';
 
-  passthru.tests.version = testers.testVersion {
-    package = gitleaks;
-    command = "${pname} version";
-  };
+  doInstallCheck = true;
 
   passthru.updateScript = nix-update-script { };