$ git clone -n https://gitee.com/wenyuzifang/cosign.git /var/lib/mock/dist-an23.5-build-570420-92601/root/chroot_tmpdir/scmroot/cosign
Cloning into '/var/lib/mock/dist-an23.5-build-570420-92601/root/chroot_tmpdir/scmroot/cosign'...
$ git reset --hard e12bb2aecd4a189de81a2fd6f3cc4507d7e93536
HEAD is now at e12bb2a [CVE] [Upstream] add patch to fix CVE-2026-39395