I use the Git Plugin to check out the repository. There I have configured an advanced submodule behaviour, where I have checked the boxes for “recursively update submodules” and “use credentials from default remote of parent repo”.