$ git clone -n https://gitee.com/wenyuzifang/cosign.git /var/lib/mock/dist-an23-build-567916-92210/root/chroot_tmpdir/scmroot/cosign
Cloning into '/var/lib/mock/dist-an23-build-567916-92210/root/chroot_tmpdir/scmroot/cosign'...
$ git fetch origin e74cdacb18fa0f43cb634d8de9c2a67d443d57ff:KOJI_FETCH_HEAD
From https://gitee.com/wenyuzifang/cosign
 * [new ref]         e74cdacb18fa0f43cb634d8de9c2a67d443d57ff -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at e74cdac [CVE] [Distro] add patch to fix CVE-2026-39395