use git read-only url and change gemfile.lock