What this record establishes
Reviewed policy
An individually reviewed public policy is linked to this program page.
Read the reviewed policy profile →
Directory row 425; Active program checkbox checked; Bounties minimum displayed $100. Positive displayed minimum supports paid bounty listing. Policy and live submission availability unverified.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
*.gitlab.net | WILDCARD | Bounty eligible: Yes |
*.gitlab.org | WILDCARD | Bounty eligible: Yes |
*.gitlap.com | WILDCARD | Bounty eligible: Yes |
customers.gitlab.com | URL | Bounty eligible: Yes |
registry.gitlab.com | URL | Bounty eligible: Yes |
gitlab.com | URL | Bounty eligible: Yes |
about.gitlab.com | URL | Bounty eligible: Yes |
docs.gitlab.com | URL | Bounty eligible: Yes |
design.gitlab.com | URL | Bounty eligible: Yes |
advisories.gitlab.com | URL | Bounty eligible: Yes |
https://gitlab.com/gitlab-org/gitlab | SOURCE_CODE | Bounty eligible: Yes |
https://gitlab.com/gitlab-org/gitlab-runner | SOURCE_CODE | Bounty eligible: Yes |
https://gitlab.com/gitlab-org/gitaly | SOURCE_CODE | Bounty eligible: Yes |
https://gitlab.com/gitlab-org/gitlab-pages | SOURCE_CODE | Bounty eligible: Yes |
https://gitlab.com/gitlab-org/gitlab-shell | SOURCE_CODE | Bounty eligible: Yes |
https://gitlab.com/gitlab-org/gitlab-vscode-extension | SOURCE_CODE | Bounty eligible: Yes |
Your Own GitLab Instance | OTHER | Bounty eligible: Yes |
Other non-production infrastructure | OTHER | Bounty eligible: Yes |
GitLab for Jira Cloud | OTHER | Bounty eligible: Yes |
| Asset | Type | Group / eligibility |
|---|---|---|
*.gitlab.cn | WILDCARD | Bounty eligible: No |
*.runway.gitlab.net | WILDCARD | Bounty eligible: No |
*.gitlab-private.org | WILDCARD | Bounty eligible: No |
*.service-now.com | WILDCARD | Bounty eligible: No |
dashboards.gitlab.com | URL | Bounty eligible: No |
alerts.gitlab.com | URL | Bounty eligible: No |
support.gitlab.com | URL | Bounty eligible: No |
shop.gitlab.com | URL | Bounty eligible: No |
forum.gitlab.com | URL | Bounty eligible: No |
status.gitlab.com | URL | Bounty eligible: No |
partners.gitlab.com | URL | Bounty eligible: No |
aptly.gitlab.com | URL | Bounty eligible: No |
translate.gitlab.com | URL | Bounty eligible: No |
federal-support.gitlab.com | URL | Bounty eligible: No |
us-federal-gitlab.com | URL | Bounty eligible: No |
ir.gitlab.com | URL | Bounty eligible: No |
levelup.gitlab.com | URL | Bounty eligible: No |
gitlab.biterg.io | URL | Bounty eligible: No |
gitlabsandbox.net | URL | Bounty eligible: No |
gitlabdemo.cloud | URL | Bounty eligible: No |
gitlabtraining.cloud | URL | Bounty eligible: No |
packages.gitlab.com | URL | Bounty eligible: No |
https://gitlab.com/gitlab-org/cli/ | SOURCE_CODE | Bounty eligible: No |
https://gitlab.com/gitlab-org/opstrace/opstrace-ui | SOURCE_CODE | Bounty eligible: No |
https://gitlab.com/gitlab-org/opstrace/opstrace | SOURCE_CODE | Bounty eligible: No |
Capture limits
- Browser-rendered policy reviewed; static retrieval returned a JavaScript placeholder.
- Policy updated July 21, 2026; the displayed reward-table date is November 22, 2021. Its age is retained rather than assumed obsolete.
- Only dollar signs appear; ISO currency and normalized bounds remain null. Full live policy includes additional conditions.
- Published structured-scope rows were captured. Submission eligibility and bounty eligibility differ; program policy text may add restrictions.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
- Published scope source Primary source · reviewed 2026-10-03
Appears in Discovery, Bounty, Profile. No identity match is inferred from a shared company name.