diff --git a/pkgs/by-name/ce/certgraph/package.nix b/pkgs/by-name/ce/certgraph/package.nix
index ddf6ebe2b302..0d67979a3931 100644
--- a/pkgs/by-name/ce/certgraph/package.nix
+++ b/pkgs/by-name/ce/certgraph/package.nix
@@ -2,26 +2,38 @@
   lib,
   buildGoModule,
   fetchFromGitHub,
+  versionCheckHook,
 }:
 
 buildGoModule rec {
   pname = "certgraph";
-  version = "20220513";
+  version = "0.1.2";
 
   src = fetchFromGitHub {
     owner = "lanrat";
     repo = "certgraph";
-    rev = version;
-    sha256 = "sha256-7tvPiJHZE9X7I79DFNF1ZAQiaAkrtrXiD2fY7AkbWMk=";
+    tag = "v${version}";
+    hash = "sha256-WlNrKmny4fODnSEkP8HUF+VzMX1/LKYMdSnm7DON8Po=";
   };
 
-  vendorHash = "sha256-ErTn7pUCtz6ip2kL8FCe+3Rhs876xtqto+z5nZqQ6cI=";
+  vendorHash = "sha256-4wj96eDibGB3oX56yIr01CYLZCYMFnfoaPWaNdFH7IE=";
+
+  nativeInstallCheckInputs = [ versionCheckHook ];
+
+  ldflags = [
+    "-w"
+    "-s"
+    "-X=main.version=${version}"
+  ];
+
+  doInstallCheck = true;
 
   meta = {
     description = "Intelligence tool to crawl the graph of certificate alternate names";
-    mainProgram = "certgraph";
     homepage = "https://github.com/lanrat/certgraph";
-    license = with lib.licenses; [ gpl2Only ];
+    changelog = "https://github.com/lanrat/certgraph/releases/tag/${src.tag}";
+    license = lib.licenses.gpl2Only;
     maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "certgraph";
   };
 }