Looks this this is Gitlab EE only though, is that right?

gpm · on April 6, 2016

(I only know what I read on the issue tracker)

The part that GitHub implemented (uploading keys to the site, displaying verified signed commits in the UI) looks like it is both.

Configuring a project to only accept signed commits in various ways looks to be EE only.

sytse · on April 6, 2016

This is planned for both GitLab CE and EE