$ git clone -n https://gitee.com/wenyuzifang/cosign.git /var/lib/mock/dist-an23.5-build-567918-92209/root/chroot_tmpdir/scmroot/cosign
Cloning into '/var/lib/mock/dist-an23.5-build-567918-92209/root/chroot_tmpdir/scmroot/cosign'...
$ git reset --hard 8c1c3bbbf06252de8032b257f4431d9364f3f53d
HEAD is now at 8c1c3bb [CVE] [Distro] add patch to fix CVE-2026-39395