Earlier quoted context omitted.
Well but it seems gitlab offers a lot more value?
I just looked through the feature list, the security stuff is interesting but it requires a strange scenario where your employees are pushing malicious code to the repo (maybe this happens often and I've just never heard of it). Much of the Agile/project tracking stuff is in Jira/Basecamp/Asana/TeamCity (or GitHub projects + issues can be used if your needs are small). Some of the other stuff is done by a myriad of G…
If you are building a docker image for example, you likely are doing a pull from docker hub, the security scanning software can help you catch security issues there.
It can also help with things like dependencies in your node projects, python projects and more (at least, that is what the security scanning software we use at $work does, I assume gitlab is similar).
It's not about employees pushing malicious code, it's about catching issues with dependencies further up the stack, to make sure that the end result you are pushing to your servers/users is not vulnerable.