How we manage open source security software

This post discusses GitLab's approach to open source security, emphasizing the importance of dedicated security personnel, management buy-in, and a culture that avoids shame and punishment for security issues. It highlights GitLab's transparent disclosure of vulnerabilities in both open source and proprietary code, and the integration of security into the DevSecOps workflow. Key actions include having security engineers on staff, ensuring management support, and making security a 'muscle memory' for engineers.