sdk: avoid using private repository clone urls as base repo entry