$ git clone -n https://gitee.com/wenyuzifang/cosign.git /mnt/mock/kojid//dist-an23.5-build-563778-91724/root/chroot_tmpdir/scmroot/cosign
Cloning into '/mnt/mock/kojid//dist-an23.5-build-563778-91724/root/chroot_tmpdir/scmroot/cosign'...
$ git fetch origin f5226c4a5abf675aae0e9e9f582fefe6910288d2:KOJI_FETCH_HEAD
From https://gitee.com/wenyuzifang/cosign
 * [new ref]         f5226c4a5abf675aae0e9e9f582fefe6910288d2 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
Updating files:  87% (7/8)
Updating files: 100% (8/8)
Updating files: 100% (8/8), done.
HEAD is now at f5226c4 [CVE] [Distro] add patch to fix CVE-2026-39395