Merge pull request #594 from jonjohnsonjr/shallow-submodules

Pass ShallowSubmodules everywhere as per git docs

Author: rawlingsj

pkg/checks/update.go

@@ -361,6 +361,7 @@ func (o CheckUpdateOptions) verifyGitCheckout(p *config.Pipeline, m map[string]s
 		ReferenceName:     plumbing.ReferenceName(fmt.Sprintf("refs/tags/%s", evaluatedTag)),
 		Progress:          os.Stdout,
 		RecurseSubmodules: git.NoRecurseSubmodules,
+		ShallowSubmodules: true,
 		RemoteName:        "origin",
 		Depth:             1,
 		NoCheckout:        true,

pkg/update/deps/cleanup.go

@@ -45,6 +45,7 @@ func gitCheckout(p *config.Pipeline, dir string, mutations map[string]string) er
 		ReferenceName:     plumbing.ReferenceName(fmt.Sprintf("refs/tags/%s", evaluatedTag)),
 		Progress:          os.Stdout,
 		RecurseSubmodules: 1,
+		ShallowSubmodules: true,
 		RemoteName:        "origin",
 		Depth:             1,
 		Auth:              wgit.GetGitAuth(),

pkg/update/package.go

@@ -148,6 +148,7 @@ func (o *PackageOptions) updateAdvisories(repo *git.Repository) error {
 	cloneOpts := &git.CloneOptions{
 		URL:               gitURL.RawURL,
 		RecurseSubmodules: git.NoRecurseSubmodules,
+		ShallowSubmodules: true,
 		Auth:              wolfigit.GetGitAuth(),
 		Tags:              git.AllTags,
 		Depth:             20,

pkg/update/update.go

@@ -139,6 +139,7 @@ func (o *Options) Update(ctx context.Context) error {
 			URL:               o.RepoURI,
 			Progress:          os.Stdout,
 			RecurseSubmodules: git.DefaultSubmoduleRecursionDepth,
+			ShallowSubmodules: true,
 			Auth:              wgit.GetGitAuth(),
 			Depth:             1,
 		}