$ git clone -n https://src.fedoraproject.org/rpms/golang-x-vuln.git /var/lib/mock/f40-build-2585458-62417/root/chroot_tmpdir/scmroot/golang-x-vuln
Cloning into '/var/lib/mock/f40-build-2585458-62417/root/chroot_tmpdir/scmroot/golang-x-vuln'...
$ git fetch origin f43fcaa72023487881c09e769b6fc05f37e523dd:KOJI_FETCH_HEAD
From https://src.fedoraproject.org/rpms/golang-x-vuln
 * [new ref]         f43fcaa72023487881c09e769b6fc05f37e523dd -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at f43fcaa [packit] 1.0.4 upstream release