What WikiFix found in the GitLab Handbook

handbook.gitlab.com · 4,576 pages scanned · 332 places where pages disagree · a sample of 10

A company handbook: policies, processes and procedures across engineering, security, sales, legal and people teams.

Policy and process

Never: Under no circumstance should you be wiping your own laptop. Laptop wipes must be done from an IT Ops team member for logs.
– Offboarding FAQ
Only if IT requests for troubleshooting: Under no circumstance should you perform your own disk wipe unless you are doing so at the request of IT to troubleshoot a technical problem with the laptop.
– Laptop wipe (laptop management)

A security policy. "Never" and "only if IT asks" are different rules.

ProofPoint: Phishing simulations are provided by ProofPoint, GitLab's third party provider, and will help satisfy external regulatory requirements and bolster customer assurance.
– Phishing (security governance)
Right Hand Cybersecurity: Ongoing phishing simulations and trainings are conducted once per quarter via Right Hand Cybersecurity, GitLab's third-party provider, and requires participation and completion by all assigned GitLab Team Members and contractors/TSPs.
– Security training (security governance)

Staff deciding whether a suspicious training email is genuine are told two different vendors send it.

free and paid users of GitLab.com, Self-Managed and Dedicated versions: Applicable Software : Snowplow Metrics are collected from free and paid users of GitLab.com, Self-Managed and Dedicated versions of the Software.
– Customer product usage information
only on GitLab.com (not on self-managed instances): We do not use snowplow on our self-managed instances, only on GitLab.com
– Data model cheat sheet

The privacy page says self-managed sends events; the data team's page says it does not.

critical GitLab records stored in tier 1 and tier 2 critical systems: The below retention and secure disposal requirements apply to all GitLab records enumerated in the table below stored in GitLab tier 1 and tier 2 critical systems.
– Records retention deletion
all records, regardless of format: … 6. GitLab Records Retention Schedule GitLab Records Retention and Disposal Standard establishes the retention periods for various types of records. It applies to all records, regardless of format. Retention of records according to the Records Retention and Disposal standard must be observed to ensure consistent application of reasonable due …
– Record retention policy

The policy says the standard covers all records; the standard says only critical ones.

GitLab Iberia S.L (Spain): GitLab Iberia S.L (Spain)
– Coordinator (talent acquisition framework)
GitLab Iberia s.r.l Spain: GitLab Iberia s.r.l Spain
– Leave of absence (people policies); GitLab Iberia s.r.l Spain
– General and entity benefits (total rewards)

S.L. is a Spanish company form and s.r.l. an Italian one; contracts and payroll paperwork need the real name.

Select and Distribution partners: GitLab Select and Distribution partners have access to the proposal-based GitLab Marketing Development Funds (MDF) Program.
– Channel program guide
Open and Select partners: GitLab Open and Select partners have access to the proposal-based GitLab Marketing Development Funds (MDF) Program.
– MDF (channel program guide)
Marketing Ready partners: GitLab Marketing Ready partners have access to the proposal-based GitLab Marketing Development Funds (MDF) Program.
– Channel marketing

Three partner-facing pages disagree on who is eligible.

Leader: GitLab has been named a leader in Gartner's 2021 Enterprise Agile Tools Magic Quadrant for the first time!
– Field Flash May 2021 (field communications); GitLab was named a 'Leader' by Gartner in their 2021 Magic Quadrant for Enterprise Agile Planning Tools after entering the report as a Visionary just two years prior…
– Agile (use case go-to-market)
Visionary: Gartner: 2021 Enterprise Agile Planning Tools - Visionary
– Positioning FAQ (marketing)

A rep quoting the wrong analyst rating to a prospect is an easy way to lose credibility.

No: Can we include different product tiers (premium and ultimate), deployment types (SaaS and Self-Managed), and/or term lengths (e.g., 12 and 24 months) on the same quote? No, we cannot mix product tiers, deployment types, and/or term lengths on the same quote.
– Partner FAQ (channel operations)
Requires additional approvals: If a quote has multiple product tier SKUs (ex. Premium AND Ultimate), this requires additional approvals per our matrix.
– Order processing (field operations)

Partners are told it cannot be done; the internal page says it can, with approvals.

30 days: Kibana defaults to the UTC time zone. It does not retain logs older than 30 days.
– Kibana (support workflows)
7 days: Kibana retain logs for only 7 days.
– Secret push protection monitoring (runbook)

An engineer chasing an incident needs to know whether last month's logs still exist before promising a customer an answer.

three 8‑hour shifts (dayshift, evening, overnight): The schedule is currently split into three, 8 hour shifts which roughly correlate with the dayshift, evening, and overnight team member hours…
– Customer emergencies workflows (support)
two 12‑hour shifts (5 a – 5 p / 5 p – 5 a Pacific): The schedule is currently split into two 12 hour shifts: 5a-5p / 5p-5a (Pacific)…
– US Government on-call (support workflows)

An on-call engineer reading the wrong page shows up for a shift that does not exist.

Your first scan produces the same kind of report for your spaces, and reading it changes nothing on your pages.