DDOS is most effective on expensive endpoints. A git clone isn't exactly cheap. Fetching is especially expensive if you vary the revisions you fetch.
Does GitHub have an alternative here? A Git-compatible protocol with anonymous access that is DDoS-resilient?