I just looked through the feature list, the security stuff is interesting but it requires a strange scenario where your employees are pushing malicious code to the repo (maybe this happens often and I've just never heard of it). Much of the Agile/project tracking stuff is in Jira/Basecamp/Asana/TeamCity (or GitHub projects + issues can be used if your needs are small). Some of the other stuff is done by a myriad of GitHub actions/bots (you'd have to spend some time getting that the way you want it though)
If you want everything integrated together this is probably fine, but GitHub Enterprise + Jira Premium is $35 per user per month (and every other project management tool is cheaper and better than Jira, just about). I don't know what the value add is here, other than self-hosting. (Or at least, the $65 value add).
Security stuff is interesting even in the case where all your employees are saints.
If you are building a docker image for example, you likely are doing a pull from docker hub, the security scanning software can help you catch security issues there.
It can also help with things like dependencies in your node projects, python projects and more (at least, that is what the security scanning software we use at $work does, I assume gitlab is similar).
It's not about employees pushing malicious code, it's about catching issues with dependencies further up the stack, to make sure that the end result you are pushing to your servers/users is not vulnerable.
Depends on your needs, Jira has lots of features and plugins.
We're building Linear, focusing on speed and providing sane defaults that sense for software companies. The app offline first so all interactions are <100ms. Sprints, projects, roadmaps, multiple teams, GitHub/Gitlab/Sentry supported etc supported. Lot of YC startups and growth companies (100-300 engineers) use us.
We migrated away from Jira to YouTrack, which is quite flexible. Speed wise it's not too bad, could be snappier. But it is really flexible with full APIs. Jetbrains also has "Spaces" which is more simplified but has other toys.
Github Actions, Github Checks API already offers more ways to extend it than GitLab. GitLab is really disappointing in that regard. Even for $99/mo you don't get it. There is also barely an ecosystem around GitLab.
