To follow a responsible disclosure while dealing with security issues on Open Build Service, we are going to setup a gitlab project mirroring our github project and set CI, using gitlab CI, to make sure that the security changes aren't introducing any regression and avoid embargoed issues being leaked.