Thanks for your input. I've added more security information on our website https://gitlab.com/gitlab-com/www-gitlab-com/commit/bb7deced...

We try to achieve a good reputation by taking security seriously every day and being responsive to disclosures.