$ git clone -n https://github.com/xcp-ng-rpms/varstored.git /var/lib/mock/v8.3-incoming-8993-27901/root/chroot_tmpdir/scmroot/varstored
Cloning into '/var/lib/mock/v8.3-incoming-8993-27901/root/chroot_tmpdir/scmroot/varstored'...
$ git fetch origin d87da0a0742e4abee3efaa211139c4774d63dc56:KOJI_FETCH_HEAD
From https://github.com/xcp-ng-rpms/varstored
 * [new ref]         d87da0a0742e4abee3efaa211139c4774d63dc56 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at d87da0a secureboot-certs: Soften the dbx=none wording