$ git clone -n https://gitee.com/geliwei/cosign.git /var/lib/mock/dist-an23-build-571740-92811/root/chroot_tmpdir/scmroot/cosign
Cloning into '/var/lib/mock/dist-an23-build-571740-92811/root/chroot_tmpdir/scmroot/cosign'...
$ git fetch origin a14ce4381ca536936cbdc17d52d50b913a43951d:KOJI_FETCH_HEAD
From https://gitee.com/geliwei/cosign
 * [new ref]         a14ce4381ca536936cbdc17d52d50b913a43951d -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at a14ce43 [CVE] [Upstream] fix malformed hunk headers in CVE-2026-39395 patch