$ git clone -n https://src.fedoraproject.org/rpms/freeipa.git /var/lib/mock/f40-build-2236911-53526/root/chroot_tmpdir/scmroot/freeipa
Cloning into '/var/lib/mock/f40-build-2236911-53526/root/chroot_tmpdir/scmroot/freeipa'...
$ git fetch origin 297837b973fd8fa8dda3f2b34747c2fdd92fdff5:KOJI_FETCH_HEAD
From https://src.fedoraproject.org/rpms/freeipa
 * [new ref]         297837b973fd8fa8dda3f2b34747c2fdd92fdff5 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 297837b FreeIPA security release for CVE-2023-5455