Gitlab has been updated. More info.
ESCAPE OSSR policy document: requirements, guidelines and recommandations