Gitlab has been updated. More info here.
ESCAPE OSSR policy document: requirements, guidelines and recommandations