$ git clone -n https://gitee.com/src-anolis-os/cosign.git /var/lib/mock/dist-an23.4-build-511564-75069/root/chroot_tmpdir/scmroot/cosign
Cloning into '/var/lib/mock/dist-an23.4-build-511564-75069/root/chroot_tmpdir/scmroot/cosign'...
$ git fetch origin a23.4:KOJI_FETCH_HEAD
From https://gitee.com/src-anolis-os/cosign
 * [new branch]      a23.4      -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 61be25a [CVE] CVE-2026-22703