for external resources loaded from external urls we use protocol relative urls that start with // instead of http:// or https://
this is a standard practice to leave out the protocol for such resources. Using a protocol relative url, the web browser will decide the protocol for that resources based on the protocol used by the containing page, so if the page url uses https it will use https if the page url uses http it will use http. It simplifies the code and it prevents errors on secure pages about insecure items
If your analysis tool doesn't understand protocol relative urls I suggest talk to the vendor of the tool, they are after all valid url formats
we have been using protocol relative urls for quite a while now, it was not a change in the latest version