use ADD command to clone packages

pkg/buildx/Dockerfile

@@ -48,11 +48,9 @@ FROM --platform=$BUILDPLATFORM alpine AS src-base
 RUN apk add --no-cache bash curl file git zip tar
 
 FROM src-base AS src
-WORKDIR /src
 ARG PKG_REPO
-RUN git init . && git remote add origin "${PKG_REPO}"
 ARG PKG_REF
-RUN git fetch origin "${PKG_REF}" +refs/heads/*:refs/remotes/origin/* +refs/tags/*:refs/tags/* && git checkout -q FETCH_HEAD
+ADD --keep-git-dir=true "${PKG_REPO}#${PKG_REF}" /src
 
 FROM src-base AS src-tgz
 RUN --mount=from=src,source=/src,target=/buildx \

pkg/compose/Dockerfile

@@ -51,11 +51,9 @@ FROM --platform=$BUILDPLATFORM alpine AS src-base
 RUN apk add --no-cache bash curl file git zip tar
 
 FROM src-base AS src
-WORKDIR /src
 ARG PKG_REPO
-RUN git init . && git remote add origin "${PKG_REPO}"
 ARG PKG_REF
-RUN git fetch origin "${PKG_REF}" +refs/heads/*:refs/remotes/origin/* +refs/tags/*:refs/tags/* && git checkout -q FETCH_HEAD
+ADD --keep-git-dir=true "${PKG_REPO}#${PKG_REF}" /src
 
 FROM src-base AS src-tgz
 RUN --mount=from=src,source=/src,target=/compose \

pkg/containerd/Dockerfile

@@ -61,15 +61,9 @@ FROM --platform=$BUILDPLATFORM alpine AS src-base
 RUN apk add --no-cache bash curl file git zip tar
 
 FROM src-base AS src
-WORKDIR /src
 ARG PKG_REPO
-RUN git init . && git remote add origin "${PKG_REPO}"
 ARG PKG_REF
-RUN  <<EOT
-  set -ex
-  git fetch origin "${PKG_REF}" +refs/heads/*:refs/remotes/origin/* +refs/tags/*:refs/tags/*
-  git checkout -q FETCH_HEAD
-EOT
+ADD --keep-git-dir=true "${PKG_REPO}#${PKG_REF}" /src
 
 FROM src-base AS src-tgz
 RUN --mount=from=src,source=/src,target=/containerd \

pkg/credential-helpers/Dockerfile

@@ -52,11 +52,9 @@ FROM --platform=$BUILDPLATFORM alpine AS src-base
 RUN apk add --no-cache bash curl file git zip tar
 
 FROM src-base AS src
-WORKDIR /src
 ARG PKG_REPO
-RUN git init . && git remote add origin "${PKG_REPO}"
 ARG PKG_REF
-RUN git fetch origin "${PKG_REF}" +refs/heads/*:refs/remotes/origin/* +refs/tags/*:refs/tags/* && git checkout -q FETCH_HEAD
+ADD --keep-git-dir=true "${PKG_REPO}#${PKG_REF}" /src
 
 FROM src-base AS src-tgz
 RUN --mount=from=src,source=/src,target=/docker-credential-helpers \

pkg/docker-cli/Dockerfile

@@ -54,11 +54,9 @@ FROM --platform=$BUILDPLATFORM alpine AS src-base
 RUN apk add --no-cache bash curl file git zip tar
 
 FROM src-base AS src
-WORKDIR /src
 ARG PKG_REPO
-RUN git init . && git remote add origin "${PKG_REPO}"
 ARG PKG_REF
-RUN git fetch origin "${PKG_REF}" +refs/heads/*:refs/remotes/origin/* +refs/tags/*:refs/tags/* && git checkout -q FETCH_HEAD
+ADD --keep-git-dir=true "${PKG_REPO}#${PKG_REF}" /src
 
 FROM src-base AS src-tgz
 RUN --mount=from=src,source=/src,target=/cli \

pkg/docker-engine/Dockerfile

@@ -51,11 +51,9 @@
 RUN apk add --no-cache bash curl file git zip tar
 
 FROM src-base AS src
-WORKDIR /src
 ARG PKG_REPO
-RUN git init . && git remote add origin "${PKG_REPO}"
 ARG PKG_REF
-RUN git fetch origin "${PKG_REF}" +refs/heads/*:refs/remotes/origin/* +refs/tags/*:refs/tags/* && git checkout -q FETCH_HEAD
+ADD --keep-git-dir=true "${PKG_REPO}#${PKG_REF}" /src
 
 FROM src-base AS src-tgz
 RUN --mount=from=src,source=/src,target=/engine \
@@ -93,8 +91,8 @@
 ENV GOTOOLCHAIN="local"
 ENV GO111MODULE="off"
 ENV PATH="$PATH:/usr/local/go/bin:$GOPATH/bin"
 ENV DOCKER_BUILDTAGS apparmor seccomp selinux
 ENV RUNC_BUILDTAGS apparmor seccomp selinux
 ARG DISTRO_NAME
 RUN apt-get update && apt-get install -y --no-install-recommends apt-utils bash ca-certificates curl devscripts equivs git
 RUN <<EOT
@@ -140,8 +138,8 @@
 ENV GOTOOLCHAIN="local"
 ENV GO111MODULE="off"
 ENV PATH="$PATH:/usr/local/go/bin:$GOPATH/bin"
 ENV DOCKER_BUILDTAGS seccomp selinux
 ENV RUNC_BUILDTAGS seccomp selinux
 ARG DISTRO_NAME
 RUN --mount=type=bind,from=scripts,source=rpm-init.sh,target=/usr/local/bin/rpm-init \
   rpm-init $DISTRO_NAME

pkg/sbom/Dockerfile

@@ -48,11 +48,9 @@ FROM --platform=$BUILDPLATFORM alpine AS src-base
 RUN apk add --no-cache bash curl file git zip tar
 
 FROM src-base AS src
-WORKDIR /src
 ARG PKG_REPO
-RUN git init . && git remote add origin "${PKG_REPO}"
 ARG PKG_REF
-RUN git fetch origin "${PKG_REF}" +refs/heads/*:refs/remotes/origin/* +refs/tags/*:refs/tags/* && git checkout -q FETCH_HEAD
+ADD --keep-git-dir=true "${PKG_REPO}#${PKG_REF}" /src
 
 FROM src-base AS src-tgz
 RUN --mount=from=src,source=/src,target=/sbom \

pkg/scan/Dockerfile

@@ -48,11 +48,9 @@ FROM --platform=$BUILDPLATFORM alpine AS src-base
 RUN apk add --no-cache bash curl file git zip tar
 
 FROM src-base AS src
-WORKDIR /src
 ARG PKG_REPO
-RUN git init . && git remote add origin "${PKG_REPO}"
 ARG PKG_REF
-RUN git fetch origin "${PKG_REF}" +refs/heads/*:refs/remotes/origin/* +refs/tags/*:refs/tags/* && git checkout -q FETCH_HEAD
+ADD --keep-git-dir=true "${PKG_REPO}#${PKG_REF}" /src
 
 FROM src-base AS src-tgz
 RUN --mount=from=src,source=/src,target=/scan \