$ git clone -n https://github.com/xcp-ng-rpms/xen.git /var/lib/mock/v8.3-incoming-10228-28802/root/chroot_tmpdir/scmroot/xen
Cloning into '/var/lib/mock/v8.3-incoming-10228-28802/root/chroot_tmpdir/scmroot/xen'...
$ git fetch origin 77364b1857c7f9345f3be8fbca2eb5b2adaf375b:KOJI_FETCH_HEAD
From https://github.com/xcp-ng-rpms/xen
 * [new ref]         77364b1857c7f9345f3be8fbca2eb5b2adaf375b -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 77364b1 XSA-477 CVE-2025-58150, XSA-479 CVE-2026-23553