$ git clone -n https://gitee.com/lzq11122/cosign.git /var/lib/mock/dist-an23.4-build-514638-75109/root/chroot_tmpdir/scmroot/cosign
Cloning into '/var/lib/mock/dist-an23.4-build-514638-75109/root/chroot_tmpdir/scmroot/cosign'...
$ git fetch origin 8d6f8b0a38e0ec6aac529bae2c9f444cb04f5ccb:KOJI_FETCH_HEAD
From https://gitee.com/lzq11122/cosign
 * [new ref]         8d6f8b0a38e0ec6aac529bae2c9f444cb04f5ccb -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 8d6f8b0 Update 3.0.5  to fix CVE-2026-24122