One should really use a separate table instead of using polymorphic associations. See https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/11168 for more information.
This Cop blacklists the use of ActiveRecord's "serialize" method, except for cases where we already use this.