$ git clone -n https://src.fedoraproject.org/rpms/bandit.git /var/lib/mock/f40-build-2047131-48950/root/chroot_tmpdir/scmroot/bandit
Cloning into '/var/lib/mock/f40-build-2047131-48950/root/chroot_tmpdir/scmroot/bandit'...
$ git fetch origin a01ed0c9355484ee203396a9ac955205ae71cced:KOJI_FETCH_HEAD
From https://src.fedoraproject.org/rpms/bandit
 * [new ref]         a01ed0c9355484ee203396a9ac955205ae71cced -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at a01ed0c Update to 1.7.6 - Closes rhbz#2253734