$ git clone -n https://gitee.com/pang-qing/apache-commons-compress.git /var/lib/mock/dist-an23-build-python3.11-385540-71833/root/chroot_tmpdir/scmroot/apache-commons-compress
Cloning into '/var/lib/mock/dist-an23-build-python3.11-385540-71833/root/chroot_tmpdir/scmroot/apache-commons-compress'...
$ git fetch origin dd559402913585a6258ac85be0d5a6f2ab4c2a0c:KOJI_FETCH_HEAD
From https://gitee.com/pang-qing/apache-commons-compress
 * [new ref]         dd559402913585a6258ac85be0d5a6f2ab4c2a0c -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at dd55940 CVE-2024-25710 and CVE-2024-26308