Feature: Security, sanitize clone url (all implementations)

[murjax]

Ensure the clone url is always a url. We currently trust that the clone url doesn't contain harmful content.

[MichaelDimmitt]

All implementations checklist:

• [ ] bash
• [ ] ruby
• [ ] python
• [ ] elixir