Right now, the GitLab installation allows HTTP access to the source code.
Industry standards are HTTPS and SSH (see BitBucket, GitHub etc.). I'm especially missing SSH since this doesn't require me to type in my password every time I push something to my gmsh fork.