$ git clone -n https://src.fedoraproject.org/rpms/ca-certificates.git /var/lib/mock/f40-build-2208861-52147/root/chroot_tmpdir/scmroot/ca-certificates
Cloning into '/var/lib/mock/f40-build-2208861-52147/root/chroot_tmpdir/scmroot/ca-certificates'...
$ git fetch origin 44da037acbb6f11874d82c55afc46db072984c08:KOJI_FETCH_HEAD
From https://src.fedoraproject.org/rpms/ca-certificates
 * [new ref]         44da037acbb6f11874d82c55afc46db072984c08 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 44da037 update-ca-trust: Fix bug in update-ca-trust so we don't depened on util-unix rhbz#2242727