Announcement: Omnibus security development has moved to GitLab Security

What is changing?

Starting with the current Security Release, security development for Omnibus GitLab has moved from dev.gitlab.org to a private project on GitLab Security.

Why we're doing this change?

Moving Omnibus to GitLab Security helps to remove the blocking nature of Security releases by automating the Security release tasks, this in turn, has a positive impact on the Release Velocity.

How does this impact me?

If you're an engineer preparing a security fix for Omnibus GitLab this change has a potential of impacting your workflow. Make sure you're using the latest version of the Security issue template and the Security merge request template and follow the steps there.

What about the other steps on the security release process?

We're only migrating the development of security fixes to GitLab.com. The rest of the security release steps stays the same.

What is going to happen to the Omnibus GitLab repository on dev.gitlab.org?

Since the Distribution team still needs to push feature branches to dev.gitlab.org/gitlab/omnibus-gitlab, this repository will remain as is.

---

For more details about the migration, please see: #692 (closed)

If you have any other question, please submit it to this issue.