Nix

let
    source = pkgs.fetchurl {
      url = "https://somewebsite/somefile.png";
      sha256 = "{hash}"; …