https://docs.gitlab.com/ee/development/gemfile.html#bundler-... gitlab have them locked and here is their readme on it. Bike Shed?