$ git clone -n https://src.fedoraproject.org/rpms/fontforge.git /var/lib/mock/f40-build-801688-143847/root/chroot_tmpdir/scmroot/fontforge
Cloning into '/var/lib/mock/f40-build-801688-143847/root/chroot_tmpdir/scmroot/fontforge'...
$ git fetch origin fe895d729a1ac8be3f9ee1211ea62dc5e30b1c24:KOJI_FETCH_HEAD
From https://src.fedoraproject.org/rpms/fontforge
 * [new ref]         fe895d729a1ac8be3f9ee1211ea62dc5e30b1c24 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at fe895d7 Resolves: CVE-2024-25081 and CVE-2024-25082