$ git clone -n https://src.fedoraproject.org/rpms/tar.git /var/lib/mock/f38-build-708724-92357/root/chroot_tmpdir/scmroot/tar
Cloning into '/var/lib/mock/f38-build-708724-92357/root/chroot_tmpdir/scmroot/tar'...
$ git reset --hard d26db18d596883cc50a73b515e7a6d64f023eda6
HEAD is now at d26db18 Fix for CVE-2022-48303