$ git clone -n https://gitee.com/wenyuzifang/cosign.git /mnt/mock/kojid//dist-an23-build-563769-91723/root/chroot_tmpdir/scmroot/cosign
Cloning into '/mnt/mock/kojid//dist-an23-build-563769-91723/root/chroot_tmpdir/scmroot/cosign'...
$ git fetch origin aacff8909c5d019d2294ab6559b29f28f05a72b9:KOJI_FETCH_HEAD
From https://gitee.com/wenyuzifang/cosign
 * [new ref]         aacff8909c5d019d2294ab6559b29f28f05a72b9 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
Updating files:  87% (7/8)
Updating files: 100% (8/8)
Updating files: 100% (8/8), done.
HEAD is now at aacff89 [CVE] [Distro] add patch to fix CVE-2026-39395