$ git clone -n https://gitee.com/geliwei/cosign.git /var/lib/mock/dist-an23.5-build-571743-92788/root/chroot_tmpdir/scmroot/cosign
Cloning into '/var/lib/mock/dist-an23.5-build-571743-92788/root/chroot_tmpdir/scmroot/cosign'...
$ git reset --hard 52ce92e9ffbdfc7e1e60b0df4ec7e342c272efe1
HEAD is now at 52ce92e [CVE] [Upstream] add patch to fix CVE-2026-39395