$ git clone -n https://gitee.com/src-anolis-os/ca-certificates.git /var/lib/mock/dist-an8.10-build-589385-98783/root/chroot_tmpdir/scmroot/ca-certificates
Cloning into '/var/lib/mock/dist-an8.10-build-589385-98783/root/chroot_tmpdir/scmroot/ca-certificates'...
$ git reset --hard 0dc315504c2a777678e54923ac38455851c83ef7
HEAD is now at 0dc3155 invalidate two certs 'emSign Root TLS CA - G3' and 'Comodo AAA Services root'