$ git clone -n https://gitee.com/ali-inspur/cosign.git /var/lib/mock/dist-an23.4-build-514805-75117/root/chroot_tmpdir/scmroot/cosign
Cloning into '/var/lib/mock/dist-an23.4-build-514805-75117/root/chroot_tmpdir/scmroot/cosign'...
$ git fetch origin 700440a194374b7a559c2a1a8b5ad96bd41178f3:KOJI_FETCH_HEAD
From https://gitee.com/ali-inspur/cosign
 * [new ref]         700440a194374b7a559c2a1a8b5ad96bd41178f3 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 700440a [CVE] CVE-2026-24122