Can you get GitLab on-prem if you're in a sanctioned country though, or is GitLab also not allowed to let you download it if that's where you're located?
Since at its core it's free software, you can download it from wherever you want.
But since US companies are forced to geo-restrict, how can you verify that the (free) software you've downloaded, is actually the free software offered by those companies?
With their signatures, commit hashes and distribution networks you trust (such as distro maintainers, for instance).
You most likely already do that without any sanctions that affect you.