To get the v for a module from a different repo on a specific commit:
go get github.com/adrianriobo/pulumi-command@4007017bb359927f8474c223a753d6f2d4be79e2

This will add the required dependency on go.mod:
require (
	github.com/adrianriobo/pulumi-command v0.0.0-20221223131545-4007017bb359 // indirect
 ...
)

Then use replace with the value:

replace github.com/pulumi/pulumi-command/sdk => github.com/adrianriobo/pulumi-command/sdk v0.0.0-20221223113640-4d64615aff90