Use read-only GitHub git:// URLs by default