disable ssh check to pull upstream changes

    - git clone $CI_PROJECT_SSH_URL $CI_PROJECT_DIR

    - cd $CI_PROJECT_DIR

  script:

    - git config http.sslverify false

    - git config --global http.sslverify false

    # update $UPSTREAM_BRANCH & tags

    - git fetch origin

    - git checkout $UPSTREAM_BRANCH