diff --git a/justfile b/justfile
index 5d60c1d9e..adf4a51d5 100755
--- a/justfile
+++ b/justfile
@@ -201,13 +201,13 @@ new-security-rule name:
 clone-submodule dir url sha:
   cd {{dir}} || git init {{dir}}
   cd {{dir}} && git remote add origin {{url}} || true
-  cd {{dir}} && git fetch --depth=1 origin {{sha}} && git reset --hard {{sha}}
+  cd {{dir}} && git fetch --depth=1 origin {{sha}} && git reset --hard {{sha}} && git clean -f -q
 
 [windows]
 clone-submodule dir url sha:
   if (-not (Test-Path {{dir}}/.git)) { git init {{dir}} }
   cd {{dir}} ; if ((git remote) -notcontains 'origin') { git remote add origin {{url}} } else { git remote set-url origin {{url}} }
-  cd {{dir}} ; git fetch --depth=1 origin {{sha}} ; git reset --hard {{sha}}
+  cd {{dir}} ; git fetch --depth=1 origin {{sha}} ; git reset --hard {{sha}} ; git clean -f -q
 
 website path:
   cargo run -p website -- linter-rules --table {{path}}/src/docs/guide/usage/linter/generated-rules.md --rule-docs {{path}}/src/docs/guide/usage/linter/rules --git-ref $(git rev-parse HEAD)