use repo head to get self-signed-cert support