$ git clone -n https://gitee.com/geliwei/cosign.git /var/lib/mock/dist-an23-build-557362-90176/root/chroot_tmpdir/scmroot/cosign
Cloning into '/var/lib/mock/dist-an23-build-557362-90176/root/chroot_tmpdir/scmroot/cosign'...
$ git fetch origin dbe008a3c25213d626b9a60724efa3a3f82fb96a:KOJI_FETCH_HEAD
From https://gitee.com/geliwei/cosign
 * [new ref]         dbe008a3c25213d626b9a60724efa3a3f82fb96a -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at dbe008a [CVE] [Anolis] add patch to fix CVE-2026-39395