I think a lot of that is that they are security minded, open source, and Gitlab is loud about their vulnerabilities, as part of that ethos. GitHub enterprises,

I think a lot of that is that they are security minded, open source, and Gitlab is loud about their vulnerabilities, as part of that ethos. GitHub enterprises, the on-prem version of their product, has plenty of vulnerabilities [1]. There's probably just as many in their hosted product, but we don't hear about them because they're fixed quietly. [1] https://www.cvedetails.com/vulnerability-list/vendor_id-11914/product_id-81111/Github-Enterprise-Server.html https://www.cvedetails.com/vulnerability-list/vendor_id-1191...