Unintuitive MixedContent error trace on my personal website

I have a portfolio website (https://github.com/ltbd78/portfolio) deployed on GitHub Pages (https://ltbd78.github.io/portfolio) and served on google domains (http://linsuhan.com). The insecure http://linsuhan.com site works fine but the secure https://linsuhan.come gets the following three MixedContent errors:

Mixed Content: The page at 'https://linsuhan.com/' was loaded over HTTPS, but requested an insecure script 'http://linsuhan.com/static/js/main.a0793265.js'. This request has been blocked; the content must be served over HTTPS.

Mixed Content: The page at 'https://linsuhan.com/' was loaded over HTTPS, but requested an insecure stylesheet 'http://linsuhan.com/static/css/main.f8417732.css'. This request has been blocked; the content must be served over HTTPS.

Mixed Content: The page at 'https://linsuhan.com/' was loaded over HTTPS, but requested an insecure favicon 'http://linsuhan.com/logo-l.png'. This request has been blocked; the content must be served over HTTPS.

I’ve been scratching my head the whole week on trying to debug where exactly exactly in my source code is this error trace coming from since I’m using ReactJS and the final build .js .css files differ drastically from the src .jsx and .scss files.

Is there a way to find out which line in my source code does this error reference?