diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 1c265e2..e716834 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -39,3 +39,6 @@ jobs:
 
     - name: npm test
       run: npm test
+
+    - name: audit security
+      run: npm audit
diff --git a/__tests__/auth.test.ts b/__tests__/auth.test.ts
index ac2ab52..5c0e607 100644
--- a/__tests__/auth.test.ts
+++ b/__tests__/auth.test.ts
@@ -20,7 +20,7 @@ describe('auth', () => {
         let auth: string = obj.headers.Authorization;
         let creds: string = Buffer.from(auth.substring('Basic '.length), 'base64').toString();
         expect(creds).toBe('johndoe:password');
-        expect(obj.url).toBe("https://httpbin.org/get");
+        expect(obj.url).toBe("http://httpbin.org/get");
     });
 
     it('does basic http get request with pat token auth', async() => {
@@ -36,7 +36,7 @@ describe('auth', () => {
         let auth: string = obj.headers.Authorization;
         let creds: string = Buffer.from(auth.substring('Basic '.length), 'base64').toString();
         expect(creds).toBe('PAT:' + token);
-        expect(obj.url).toBe("https://httpbin.org/get");
+        expect(obj.url).toBe("http://httpbin.org/get");
     });
     
     it('does basic http get request with pat token auth', async() => {
@@ -51,6 +51,6 @@ describe('auth', () => {
         let obj:any = JSON.parse(body);
         let auth: string = obj.headers.Authorization;
         expect(auth).toBe('Bearer ' + token);
-        expect(obj.url).toBe("https://httpbin.org/get");
+        expect(obj.url).toBe("http://httpbin.org/get");
     });    
 })
diff --git a/__tests__/basics.test.ts b/__tests__/basics.test.ts
index b67b3f7..41105c6 100644
--- a/__tests__/basics.test.ts
+++ b/__tests__/basics.test.ts
@@ -37,7 +37,7 @@ describe('basics', () => {
         expect(res.message.statusCode).toBe(200);
         let body: string = await res.readBody();      
         let obj: any = JSON.parse(body);
-        expect(obj.url).toBe("https://httpbin.org/get");
+        expect(obj.url).toBe("http://httpbin.org/get");
         expect(obj.headers["User-Agent"]).toBeTruthy();
         done();
     });   
@@ -48,7 +48,7 @@ describe('basics', () => {
         expect(res.message.statusCode).toBe(200);
         let body: string = await res.readBody();      
         let obj: any = JSON.parse(body);
-        expect(obj.url).toBe("https://httpbin.org/get");
+        expect(obj.url).toBe("http://httpbin.org/get");
         expect(obj.headers["User-Agent"]).toBeFalsy();
         done();
     });    
@@ -75,7 +75,7 @@ describe('basics', () => {
         let obj:any = JSON.parse(body);
         expect(obj.headers.Accept).toBe('application/json');
         expect(obj.headers['Content-Type']).toBe('application/json');
-        expect(obj.url).toBe("https://httpbin.org/get");
+        expect(obj.url).toBe("http://httpbin.org/get");
         done();
     });    
 
@@ -94,7 +94,7 @@ describe('basics', () => {
         let obj:any = JSON.parse(body);
         expect(obj.headers.Accept).toBe('application/json');
         expect(obj.headers['Content-Type']).toBe('application/x-www-form-urlencoded');
-        expect(obj.url).toBe("https://httpbin.org/get");
+        expect(obj.url).toBe("http://httpbin.org/get");
         done();
     });    
 
@@ -164,7 +164,7 @@ describe('basics', () => {
         let body: string = await res.readBody();
         let obj:any = JSON.parse(body);
         expect(obj.data).toBe(b);
-        expect(obj.url).toBe("https://httpbin.org/post");
+        expect(obj.url).toBe("http://httpbin.org/post");
         done();
     });    
 
@@ -175,7 +175,7 @@ describe('basics', () => {
         let body: string = await res.readBody();
         let obj:any = JSON.parse(body);
         expect(obj.data).toBe(b);
-        expect(obj.url).toBe("https://httpbin.org/patch");
+        expect(obj.url).toBe("http://httpbin.org/patch");
         done();
     });
     
diff --git a/__tests__/keepalive.test.ts b/__tests__/keepalive.test.ts
index 7d14774..b532190 100644
--- a/__tests__/keepalive.test.ts
+++ b/__tests__/keepalive.test.ts
@@ -16,7 +16,7 @@ describe('basics', () => {
         expect(res.message.statusCode).toBe(200);
         let body: string = await res.readBody();      
         let obj:any = JSON.parse(body);
-        expect(obj.url).toBe("https://httpbin.org/get");
+        expect(obj.url).toBe("http://httpbin.org/get");
         done();
     });
 
@@ -41,7 +41,7 @@ describe('basics', () => {
         let body: string = await res.readBody();
         let obj:any = JSON.parse(body);
         expect(obj.data).toBe(b);
-        expect(obj.url).toBe("https://httpbin.org/post");
+        expect(obj.url).toBe("http://httpbin.org/post");
         done();
     }); 
     
@@ -52,7 +52,7 @@ describe('basics', () => {
         let body: string = await res.readBody();
         let obj:any = JSON.parse(body);
         expect(obj.data).toBe(b);
-        expect(obj.url).toBe("https://httpbin.org/patch");
+        expect(obj.url).toBe("http://httpbin.org/patch");
         done();
     }); 
     
diff --git a/__tests__/proxy.test.ts b/__tests__/proxy.test.ts
index 437d05d..c085a53 100644
--- a/__tests__/proxy.test.ts
+++ b/__tests__/proxy.test.ts
@@ -151,7 +151,7 @@ describe('proxy', () => {
         expect(res.message.statusCode).toBe(200);
         let body: string = await res.readBody();
         let obj: any = JSON.parse(body);
-        expect(obj.url).toBe("https://httpbin.org/get");
+        expect(obj.url).toBe("http://httpbin.org/get");
         expect(_proxyConnects).toEqual(['httpbin.org:80'])
     })
 
@@ -163,7 +163,7 @@ describe('proxy', () => {
         expect(res.message.statusCode).toBe(200);
         let body: string = await res.readBody();
         let obj: any = JSON.parse(body);
-        expect(obj.url).toBe("https://httpbin.org/get");
+        expect(obj.url).toBe("http://httpbin.org/get");
         expect(_proxyConnects).toHaveLength(0)
     })
 
diff --git a/package-lock.json b/package-lock.json
index 1ea9b5b..cfc5cea 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,6 +1,6 @@
 {
   "name": "@actions/http-client",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {
diff --git a/package.json b/package.json
index 1d6414f..4b1c489 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@actions/http-client",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "Actions Http Client",
   "main": "index.js",
   "scripts": {