diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 593a212..240063f 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -16,11 +16,7 @@ release-image:
     - apk add --no-cache git
   script:
     - |- # fetch upstream
-      mkdir windmill && cd windmill
-      git init
-      git remote add origin $UPSTREAM_REPOSITORY
-      git fetch origin $UPSTREAM_REF
-      git checkout $UPSTREAM_REF
+      git clone $UPSTREAM_REPOSITORY --depth 1 --branch $UPSTREAM_REF
     - |- # patch lic
       export FILE=backend/windmill-api/src/ee.rs
       export PREV_CONTENT=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDgVShzcLSPiOi+8ET8fggob1kmi47/cE12JaidPkwfGnScZItghkqtiLsct0U4kJhlp5gO89DYTBmIKadvxwY7kMsLlZzmi2emVH7c27cByGASY8QmWDNdG4Ggy/NDflGGBdAtN6gHawZAg4zHv3qpbPQGHH1/6sXIohcXhOnouwIDAQAB
@@ -43,4 +39,4 @@ container_scanning:
     - release-image
 include:
   - template: Jobs/Container-Scanning.gitlab-ci.yml
-  - template: Security/Secret-Detection.gitlab-ci.yml
+  - template: Security/Secret-Detection.gitlab-ci.yml
\ No newline at end of file