It would be nice if we had a withGit step that would pre-configure the git credentials from the current "scm" object and allows us to invoke git from the command line as follows:

withGit {
   sh 'git fetch'
}

The step would rely on the same GIT_ASKPASS mechanism as used during a "standard" checkout.