$ git clone -n https://src.fedoraproject.org/rpms/xsecurelock.git /var/lib/mock/f41-build-side-1-2771753-32246/root/chroot_tmpdir/scmroot/xsecurelock
Cloning into '/var/lib/mock/f41-build-side-1-2771753-32246/root/chroot_tmpdir/scmroot/xsecurelock'...
$ git fetch origin c4eae353b111555e792db865cfb48ea8421dd8c8:KOJI_FETCH_HEAD
From https://src.fedoraproject.org/rpms/xsecurelock
 * [new ref]         c4eae353b111555e792db865cfb48ea8421dd8c8 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at c4eae35 convert ASL 2.0 license to SPDX