For community contributions, we enforce <ahref ="https://gitlab.com/gitlab-org/gitlab-ce/blob/master/CONTRIBUTING.md#style-guides">style guides</a>.
In addition, both for community contributions and for internal development, we use <ahref="http://brakemanscanner.org/">brakeman</a> and <ahref="https://github.com/bbatsov/rubocop">RuboCop </a> run by GitLab CI.
</p>
<p>
We engage security experts to do white box testing.
</p>
GitLab also has a <ahref="https://about.gitlab.com/disclosure/">responsible disclosure program </a>.
</p>
<h3>We engage security experts to do white box testing.<h3>
<h3>GitLab also has a <ahref="https://about.gitlab.com/disclosure/">responsible disclosure program </a>.<h3>