shallow clones are bad?

If it's just a single system doing CI, we're fine with whatever legitimate things you're doing with git. If, however, you're doing CI at any kind of scale, please set up your own mirror, don't hammer the public resource.