$ git clone -n https://src.fedoraproject.org/rpms/xerces-c.git /var/lib/mock/f40-build-2252055-54169/root/chroot_tmpdir/scmroot/xerces-c
Cloning into '/var/lib/mock/f40-build-2252055-54169/root/chroot_tmpdir/scmroot/xerces-c'...
$ git fetch origin d7070a1556a4300a59d29dd38d9083908552e26f:KOJI_FETCH_HEAD
From https://src.fedoraproject.org/rpms/xerces-c
 * [new ref]         d7070a1556a4300a59d29dd38d9083908552e26f -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at d7070a1 Update to 3.2.5, fixing CVE-2018-1311 and CVE-2023-37536