$ git clone -n https://src.fedoraproject.org/rpms/ghc-xss-sanitize.git /var/lib/mock/f40-build-2066596-49285/root/chroot_tmpdir/scmroot/ghc-xss-sanitize
Cloning into '/var/lib/mock/f40-build-2066596-49285/root/chroot_tmpdir/scmroot/ghc-xss-sanitize'...
$ git fetch origin 1bd2615775887a60c7d736c614b20925ef6278ee:KOJI_FETCH_HEAD
From https://src.fedoraproject.org/rpms/ghc-xss-sanitize
 * [new ref]         1bd2615775887a60c7d736c614b20925ef6278ee -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 1bd2615 https://hackage.haskell.org/package/xss-sanitize-0.3.7.2/changelog