fix: remove --branch flags from sg-evals mirror clones

sg-evals mirrors are orphan repos where HEAD is the pinned commit.
git clone --depth 1 --branch <commit-hash> fails because the hash
is not a branch name. Remove --branch to clone HEAD directly.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: sjarmak

benchmarks/ccb_mcp_compliance/ccx-compliance-052/environment/Dockerfile

@@ -14,10 +14,10 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 WORKDIR /workspace
 
 # Clone local checkout repos (baseline config: agent has local access to these)
-RUN git clone --depth 1 --branch v1.31.2 https://github.com/sg-evals/envoy--v1.31.2 /workspace/envoy--v1.31.2
-RUN git clone --depth 1 --branch 84e84367 https://github.com/sg-evals/data-plane-api--84e84367 /workspace/data-plane-api--84e84367
-RUN git clone --depth 1 --branch 71637ad6 https://github.com/sg-evals/go-control-plane--71637ad6 /workspace/go-control-plane--71637ad6
-RUN git clone --depth 1 --branch 957dba5e https://github.com/sg-evals/grpc--957dba5e /workspace/grpc--957dba5e
+RUN git clone --depth 1 https://github.com/sg-evals/envoy--v1.31.2 /workspace/envoy--v1.31.2
+RUN git clone --depth 1 https://github.com/sg-evals/data-plane-api--84e84367 /workspace/data-plane-api--84e84367
+RUN git clone --depth 1 https://github.com/sg-evals/go-control-plane--71637ad6 /workspace/go-control-plane--71637ad6
+RUN git clone --depth 1 https://github.com/sg-evals/grpc--957dba5e /workspace/grpc--957dba5e
 
 # Initialize git identity for agent commits
 RUN git config --global user.email "agent@example.com" && \

benchmarks/ccb_mcp_compliance/ccx-compliance-052/environment/Dockerfile.artifact_baseline

@@ -17,10 +17,10 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 WORKDIR /workspace
 
 # Clone local checkout repos (baseline config: agent has local access to these)
-RUN git clone --depth 1 --branch v1.31.2 https://github.com/sg-evals/envoy--v1.31.2 /workspace/envoy--v1.31.2
-RUN git clone --depth 1 --branch 84e84367 https://github.com/sg-evals/data-plane-api--84e84367 /workspace/data-plane-api--84e84367
-RUN git clone --depth 1 --branch 71637ad6 https://github.com/sg-evals/go-control-plane--71637ad6 /workspace/go-control-plane--71637ad6
-RUN git clone --depth 1 --branch 957dba5e https://github.com/sg-evals/grpc--957dba5e /workspace/grpc--957dba5e
+RUN git clone --depth 1 https://github.com/sg-evals/envoy--v1.31.2 /workspace/envoy--v1.31.2
+RUN git clone --depth 1 https://github.com/sg-evals/data-plane-api--84e84367 /workspace/data-plane-api--84e84367
+RUN git clone --depth 1 https://github.com/sg-evals/go-control-plane--71637ad6 /workspace/go-control-plane--71637ad6
+RUN git clone --depth 1 https://github.com/sg-evals/grpc--957dba5e /workspace/grpc--957dba5e
 
 # Initialize git identity for agent commits
 RUN git config --global user.email "agent@example.com" && \

benchmarks/ccb_mcp_compliance/ccx-compliance-053/environment/Dockerfile

@@ -14,9 +14,9 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 WORKDIR /workspace
 
 # Clone local checkout repos (baseline config: agent has local access to these)
-RUN git clone --depth 1 --branch 0753c489 https://github.com/sg-evals/kafka--0753c489 /workspace/kafka--0753c489
-RUN git clone --depth 1 --branch 0cc95fcc https://github.com/sg-evals/flink--0cc95fcc /workspace/flink--0cc95fcc
-RUN git clone --depth 1 --branch 1006f047 https://github.com/sg-evals/camel--1006f047 /workspace/camel--1006f047
+RUN git clone --depth 1 https://github.com/sg-evals/kafka--0753c489 /workspace/kafka--0753c489
+RUN git clone --depth 1 https://github.com/sg-evals/flink--0cc95fcc /workspace/flink--0cc95fcc
+RUN git clone --depth 1 https://github.com/sg-evals/camel--1006f047 /workspace/camel--1006f047
 
 # Initialize git identity for agent commits
 RUN git config --global user.email "agent@example.com" && \

benchmarks/ccb_mcp_compliance/ccx-compliance-053/environment/Dockerfile.artifact_baseline

@@ -17,9 +17,9 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 WORKDIR /workspace
 
 # Clone local checkout repos (baseline config: agent has local access to these)
-RUN git clone --depth 1 --branch 0753c489 https://github.com/sg-evals/kafka--0753c489 /workspace/kafka--0753c489
-RUN git clone --depth 1 --branch 0cc95fcc https://github.com/sg-evals/flink--0cc95fcc /workspace/flink--0cc95fcc
-RUN git clone --depth 1 --branch 1006f047 https://github.com/sg-evals/camel--1006f047 /workspace/camel--1006f047
+RUN git clone --depth 1 https://github.com/sg-evals/kafka--0753c489 /workspace/kafka--0753c489
+RUN git clone --depth 1 https://github.com/sg-evals/flink--0cc95fcc /workspace/flink--0cc95fcc
+RUN git clone --depth 1 https://github.com/sg-evals/camel--1006f047 /workspace/camel--1006f047
 
 # Initialize git identity for agent commits
 RUN git config --global user.email "agent@example.com" && \

benchmarks/ccb_mcp_compliance/ccx-compliance-115/environment/Dockerfile

@@ -14,7 +14,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 WORKDIR /workspace
 
 # Clone local checkout repos (baseline config: agent has local access to these)
-RUN git clone --depth 1 --branch 674eda1c https://github.com/sg-evals/django--674eda1c /workspace/django--674eda1c
+RUN git clone --depth 1 https://github.com/sg-evals/django--674eda1c /workspace/django--674eda1c
 
 # Initialize git identity for agent commits
 RUN git config --global user.email "agent@example.com" && \

benchmarks/ccb_mcp_compliance/ccx-compliance-115/environment/Dockerfile.artifact_baseline

@@ -17,7 +17,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 WORKDIR /workspace
 
 # Clone local checkout repos (baseline config: agent has local access to these)
-RUN git clone --depth 1 --branch 674eda1c https://github.com/sg-evals/django--674eda1c /workspace/django--674eda1c
+RUN git clone --depth 1 https://github.com/sg-evals/django--674eda1c /workspace/django--674eda1c
 
 # Initialize git identity for agent commits
 RUN git config --global user.email "agent@example.com" && \

benchmarks/ccb_mcp_compliance/ccx-compliance-118/environment/Dockerfile

@@ -14,7 +14,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 WORKDIR /workspace
 
 # Clone local checkout repos (baseline config: agent has local access to these)
-RUN git clone --depth 1 --branch 674eda1c https://github.com/sg-evals/django--674eda1c /workspace/django--674eda1c
+RUN git clone --depth 1 https://github.com/sg-evals/django--674eda1c /workspace/django--674eda1c
 
 # Initialize git identity for agent commits
 RUN git config --global user.email "agent@example.com" && \

benchmarks/ccb_mcp_compliance/ccx-compliance-118/environment/Dockerfile.artifact_baseline

@@ -17,7 +17,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 WORKDIR /workspace
 
 # Clone local checkout repos (baseline config: agent has local access to these)
-RUN git clone --depth 1 --branch 674eda1c https://github.com/sg-evals/django--674eda1c /workspace/django--674eda1c
+RUN git clone --depth 1 https://github.com/sg-evals/django--674eda1c /workspace/django--674eda1c
 
 # Initialize git identity for agent commits
 RUN git config --global user.email "agent@example.com" && \

benchmarks/ccb_mcp_compliance/ccx-compliance-124/environment/Dockerfile

@@ -14,7 +14,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 WORKDIR /workspace
 
 # Clone local checkout repos (baseline config: agent has local access to these)
-RUN git clone --depth 1 --branch 871325b8460362073cb2069874bef7dde3170cb2 https://github.com/sg-evals/firefox--871325b8 /workspace/firefox--871325b8
+RUN git clone --depth 1 https://github.com/sg-evals/firefox--871325b8 /workspace/firefox--871325b8
 
 # Initialize git identity for agent commits
 RUN git config --global user.email "agent@example.com" && \

benchmarks/ccb_mcp_compliance/ccx-compliance-124/environment/Dockerfile.artifact_baseline

@@ -17,7 +17,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 WORKDIR /workspace
 
 # Clone local checkout repos (baseline config: agent has local access to these)
-RUN git clone --depth 1 --branch 871325b8460362073cb2069874bef7dde3170cb2 https://github.com/sg-evals/firefox--871325b8 /workspace/firefox--871325b8
+RUN git clone --depth 1 https://github.com/sg-evals/firefox--871325b8 /workspace/firefox--871325b8
 
 # Initialize git identity for agent commits
 RUN git config --global user.email "agent@example.com" && \