$ git clone -n https://src.fedoraproject.org/rpms/nghttp2.git /var/lib/mock/f40-build-2703738-70856/root/chroot_tmpdir/scmroot/nghttp2
Cloning into '/var/lib/mock/f40-build-2703738-70856/root/chroot_tmpdir/scmroot/nghttp2'...
$ git fetch origin 3e88f90bcce4062bb7468abb7153ac074e4302e2:KOJI_FETCH_HEAD
From https://src.fedoraproject.org/rpms/nghttp2
 * [new ref]         3e88f90bcce4062bb7468abb7153ac074e4302e2 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 3e88f90 Resolves: CVE-2024-28182 - CONTINUATION frames DoS