diff --git a/release.nix b/release.nix
index 8df9c75..6e608b5 100644
--- a/release.nix
+++ b/release.nix
@@ -46,6 +46,13 @@ let
       ];
     }
   );
+
+  tarballs = {
+    nosv = pkgs.releaseTools.sourceTarball {
+      name = "nosv-tarball";
+      inherit (pkgs.nosv) src version;
+    };
+  };
 in
 {
   pkgs = {
@@ -56,4 +63,20 @@ in
       nanos6
       ;
   };
+
+  inherit tarballs;
+
+  coverage.nosv = pkgs.releaseTools.coverageAnalysis {
+    name = "nosv-coverage";
+    src = tarballs.nosv;
+    lcovFilter = [ "*/tests/*" ];
+  };
+
+  sanitized.nosv = pkgs.nosv.overrideAttrs (old: {
+    configureFlags = [
+      "--with-asan "
+      "--with-ubsan"
+    ];
+    CFLAGS = "-Werror";
+  });
 }