diff --git a/test/configuration.nix b/test/configuration.nix
index 93f1b39..96b87a9 100644
--- a/test/configuration.nix
+++ b/test/configuration.nix
@@ -5,37 +5,7 @@
   ...
 }:
 let
-  testProgram =
-    let
-      inherit (pkgs)
-        buildGoModule
-        pkg-config
-        util-linux
-        ;
-    in
-    buildGoModule rec {
-      pname = "check-sandbox";
-      inherit (config.environment.fortify.package) version;
-
-      src = builtins.path {
-        name = "${pname}-src";
-        path = lib.cleanSource ./.;
-        filter = path: type: (type == "directory" && lib.hasSuffix "sandbox" path) || (type == "regular" && lib.hasSuffix ".go" path);
-      };
-      vendorHash = null;
-
-      buildInputs = [ util-linux ];
-      nativeBuildInputs = [ pkg-config ];
-
-      preBuild = ''
-        go mod init git.gensokyo.uk/security/fortify/test >& /dev/null
-      '';
-
-      postInstall = ''
-        mv $out/bin/test $out/bin/fortify-test
-      '';
-    };
-
+  testProgram = pkgs.callPackage ./sandbox/tool/package.nix { inherit (config.environment.fortify.package) version; };
   testCases = import ./sandbox/case lib testProgram;
 in
 {
diff --git a/test/main.go b/test/sandbox/tool/main.go
similarity index 100%
rename from test/main.go
rename to test/sandbox/tool/main.go
diff --git a/test/sandbox/tool/package.nix b/test/sandbox/tool/package.nix
new file mode 100644
index 0000000..7cc3472
--- /dev/null
+++ b/test/sandbox/tool/package.nix
@@ -0,0 +1,30 @@
+{
+  lib,
+  buildGoModule,
+  pkg-config,
+  util-linux,
+
+  version,
+}:
+buildGoModule rec {
+  pname = "check-sandbox";
+  inherit version;
+
+  src = builtins.path {
+    name = "${pname}-src";
+    path = lib.cleanSource ../.;
+    filter = path: type: (type == "directory") || (type == "regular" && lib.hasSuffix ".go" path);
+  };
+  vendorHash = null;
+
+  buildInputs = [ util-linux ];
+  nativeBuildInputs = [ pkg-config ];
+
+  preBuild = ''
+    go mod init git.gensokyo.uk/security/fortify/test/sandbox >& /dev/null
+  '';
+
+  postInstall = ''
+    mv $out/bin/tool $out/bin/fortify-test
+  '';
+}