resolve rubocop complaints
use https for upstream, not ssh

Externals should be able to use non-authenticated access
to fetch upstream changes.