Tip: on any GitLab not installed from GitLab's own Omnibus package or image, check the Ruby version, not just the GitLab version
Alpine's near miss shows the CVE-2026-97229 fix lives in GitLab's bundled Ruby. Run ruby -v inside the container or host that runs GitLab's Puma and Sidekiq and confirm 3.3.13, 3.4.12, 4.0.9 or later. Then look for repeated worker crashes or 502s around CI config validation, which is how the failed attempts on Alpine showed up.
Sources: Alpine Linux: GitLab security incident, attempted exploitation of CVE-2026-97229 (Oct 28) · Ruby: Regexp fixes for GitLab CVEs (Oct 23)