uses public github url via https instead of ssh with cert