$ git clone -n https://gitee.com/tomcruiseqi/cosign.git /var/lib/mock/dist-an23-build-510594-75048/root/chroot_tmpdir/scmroot/cosign
Cloning into '/var/lib/mock/dist-an23-build-510594-75048/root/chroot_tmpdir/scmroot/cosign'...
$ git fetch origin 2b04938db64f55b96f70604a0aa377c6426db739:KOJI_FETCH_HEAD
From https://gitee.com/tomcruiseqi/cosign
 * [new ref]         2b04938db64f55b96f70604a0aa377c6426db739 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 2b04938 [CVE] CVE-2026-22703