$ git clone -n https://gitee.com/src-anolis-os/shim-unsigned-x64.git /mnt/mock/kojid//dist-an23.3-riscv-build-439444-73130/root/chroot_tmpdir/scmroot/shim-unsigned-x64
Cloning into '/mnt/mock/kojid//dist-an23.3-riscv-build-439444-73130/root/chroot_tmpdir/scmroot/shim-unsigned-x64'...
$ git fetch origin 3dd2184be4f8b2575c6aa1b5d9d618d0a87527b9:KOJI_FETCH_HEAD
From https://gitee.com/src-anolis-os/shim-unsigned-x64
 * [new ref]         3dd2184be4f8b2575c6aa1b5d9d618d0a87527b9 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 3dd2184 fix CVE-2023-40546 CVE-2023-40549 CVE-2023-40550 CVE-2023-40551