$ git clone -n https://gitee.com/src-anolis-os/shim-unsigned-aarch64.git /var/lib/mock/dist-an23.2-build-403884-72434/root/chroot_tmpdir/scmroot/shim-unsigned-aarch64
Cloning into '/var/lib/mock/dist-an23.2-build-403884-72434/root/chroot_tmpdir/scmroot/shim-unsigned-aarch64'...
$ git reset --hard 5037a1e86fa309779692ac5e60789dcb747b41e9
HEAD is now at 5037a1e CVE fix CVE-2023-40546 CVE-2023-40549 CVE-2023-40550 CVE-2023-40551