Allowlist GitLab sending commit status correctly (#185)

Author: stuartcmehrens

README.md

@@ -208,8 +208,8 @@ And if `allowCodeAccess` is set, additionally:
 - GET `https://gitlab.example.com/api/v4/projects/:project/repository/compare`
 - GET `https://gitlab.example.com/api/v4/projects/:project/repository/files/*`
 - GET `https://gitlab.example.com/api/v4/projects/:project/repository/merge_base`
-- GET `https://gitlab.example.com/api/v4/projects/:project/statuses/:commit`
 - POST `https://gitlab.example.com/:namespace/:project/git-upload-pack`
+- POST `https://gitlab.example.com/api/v4/projects/:project/statuses/:commit`
 <!-- EndAutogeneratedAllowList:Gitlab.AllowCodeAccess -->
 
 ### Bitbucket

pkg/config.go

@@ -870,7 +870,7 @@ func PopulateAllowLists(config *Config) error {
 				// Update commit status
 				AllowlistItem{
 					URL:               gitLabBaseUrl.JoinPath("/projects/:project/statuses/:commit").String(),
-					Methods:           ParseHttpMethods([]string{"GET"}),
+					Methods:           ParseHttpMethods([]string{"POST"}),
 					SetRequestHeaders: headers,
 				},
 				// discover refs