$ git clone -n https://src.fedoraproject.org/rpms/trivy.git /var/lib/mock/f41-build-846670-163174/root/chroot_tmpdir/scmroot/trivy
Cloning into '/var/lib/mock/f41-build-846670-163174/root/chroot_tmpdir/scmroot/trivy'...
$ git fetch origin 838a3b7b0729bbcf10f58e72399dd03c0ac40198:KOJI_FETCH_HEAD
From https://src.fedoraproject.org/rpms/trivy
 * [new ref]         838a3b7b0729bbcf10f58e72399dd03c0ac40198 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 838a3b7 Update to 0.54.1. Fixes rhbz#2302505.