diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 45d9528..f6b9fed 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,6 +6,13 @@ env:
   GO_VERSION: 1.17.8
 
 jobs:
+  pre-commit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-python@v2
+      - uses: pre-commit/action@v2.0.3
+
   git-describe:
     runs-on: ubuntu-latest
     steps:
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index fd4caa4..581488e 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -2,8 +2,8 @@
 # See https://pre-commit.com/
 
 repos:
-  - repo: git://github.com/dnephin/pre-commit-golang
-    rev: master
+  - repo: https://github.com/dnephin/pre-commit-golang
+    rev: v0.4.0
     hooks:
       - id: go-fmt
       - id: go-imports
diff --git a/htmltest/check-link_test.go b/htmltest/check-link_test.go
index bcc32ac..09087a3 100644
--- a/htmltest/check-link_test.go
+++ b/htmltest/check-link_test.go
@@ -204,6 +204,8 @@ func TestAnchorExternalBrokenOptionHTTPSInvalid(t *testing.T) {
 }
 
 func TestAnchorExternalHTTPSMissingChain(t *testing.T) {
+	// TODO: remove skip when incomplete-chain.badssl.com has an in-date cert
+	t.Skip("The cert on incomplete-chain.badssl.com has expired, cannot use for testing at present")
 	// should support https aia
 	// see issue #130
 	tSkipShortExternal(t)