$ git clone -n https://gitee.com/lzq11122/cosign.git /var/lib/mock/dist-an23-build-527504-79598/root/chroot_tmpdir/scmroot/cosign
Cloning into '/var/lib/mock/dist-an23-build-527504-79598/root/chroot_tmpdir/scmroot/cosign'...
$ git fetch origin b6715c1badef23aac6ea6a766d8d6d57ea8dc813:KOJI_FETCH_HEAD
From https://gitee.com/lzq11122/cosign
 * [new ref]         b6715c1badef23aac6ea6a766d8d6d57ea8dc813 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at b6715c1 Add patch to fix CVE-2026-39395