diff --git a/dist/release.sh b/dist/release.sh
index 05be840..8817186 100755
--- a/dist/release.sh
+++ b/dist/release.sh
@@ -12,6 +12,7 @@ go generate ./...
 go build -trimpath -v -o "${out}/bin/" -ldflags "-s -w -buildid= -extldflags '-static'
   -X git.gensokyo.uk/security/fortify/internal.Version=${VERSION}
   -X git.gensokyo.uk/security/fortify/internal.Fsu=/usr/bin/fsu
+  -X git.gensokyo.uk/security/fortify/internal.Fortify=/usr/bin/fortify
   -X main.Fmain=/usr/bin/fortify" ./...
 
 rm -f "./${out}.tar.gz" && tar -C dist -czf "${out}.tar.gz" "${pname}"
diff --git a/internal/path.go b/internal/path.go
index 9f3e1cf..97b0754 100644
--- a/internal/path.go
+++ b/internal/path.go
@@ -3,7 +3,8 @@ package internal
 import "path"
 
 var (
-	Fsu = compPoison
+	Fsu     = compPoison
+	Fortify = compPoison
 )
 
 func Path(p string) (string, bool) {
diff --git a/package.nix b/package.nix
index c081663..e45b857 100644
--- a/package.nix
+++ b/package.nix
@@ -50,6 +50,7 @@ buildGoModule rec {
       {
         Version = "v${version}";
         Fsu = "/run/wrappers/bin/fsu";
+        Fortify = "${placeholder "out"}/libexec/fortify";
       };
 
   # nix build environment does not allow acls