$ git clone -n https://src.fedoraproject.org/rpms/nghttp2.git /var/lib/mock/f39-build-1557387-37276/root/chroot_tmpdir/scmroot/nghttp2
Cloning into '/var/lib/mock/f39-build-1557387-37276/root/chroot_tmpdir/scmroot/nghttp2'...
$ git fetch origin dfa9845625bd7d711e8afc19e0850620fee46858:KOJI_FETCH_HEAD
From https://src.fedoraproject.org/rpms/nghttp2
 * [new ref]         dfa9845625bd7d711e8afc19e0850620fee46858 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at dfa9845 Resolves: CVE-2023-44487 - fix HTTP/2 Rapid Reset