$ git clone -n https://git.centos.org/rpms/shim-unsigned-x64 /var/lib/mock/dist-c8-build-2419-213/root/chroot_tmpdir/scmroot/shim-unsigned-x64
Cloning into '/var/lib/mock/dist-c8-build-2419-213/root/chroot_tmpdir/scmroot/shim-unsigned-x64'...
remote: Welcome to repoSpanner 0.5+10.e4df0439a0f696f71c1f2fee285dc2022d435839.el7.infra, node centos01.rpms.fedoraproject.org        
remote: Building packfile        
remote: Packfile built, sending        
remote: Packfile sent        
$ git reset --hard 64d7ab911590ef155c475116465778ce20adf0c3
HEAD is now at 64d7ab9 Rolled in CentOS certs for shim-unsigned