diff --git a/apps/app-runner/main.go b/apps/app-runner/main.go
index 2f4f5a8..b560c6c 100644
--- a/apps/app-runner/main.go
+++ b/apps/app-runner/main.go
@@ -7,6 +7,7 @@
 	"log"
 	"net"
 	"os"
+	"strings"
 
 	"golang.org/x/crypto/ssh"
 
@@ -91,7 +92,8 @@
 		panic("no SELF_IP")
 	}
 	var signer ssh.Signer
-	if *sshKey != "" {
+	// TODO(gio): revisit this logic
+	if *sshKey != "" && !(strings.HasPrefix(*repoAddr, "http://") || strings.HasPrefix(*repoAddr, "https://")) {
 		key, err := os.ReadFile(*sshKey)
 		if err != nil {
 			panic(err)