Add /namespace to GitLab allowlist for SCM driver v2 (#77)

--------- Signed-off-by: Alexis Grant <[email protected]>
semgrep · Jul 10, 2024 · ab29007 · ab29007
1 parent c928c00
commit ab29007
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -117,6 +117,7 @@ inbound:
 
 Under the hood, this config adds these allowlist items:
 
+- GET `https://gitlab.example.com/api/v4/namespaces/:namespace`
 - GET `https://gitlab.example.com/api/v4/projects/:project`
 - GET `https://gitlab.example.com/api/v4/projects/:project/merge_requests`
 - GET `https://gitlab.example.com/api/v4/projects/:project/merge_requests/:number/versions`

diff --git a/pkg/config.go b/pkg/config.go
@@ -412,6 +412,12 @@ func LoadConfig(configFiles []string, deploymentId int) (*Config, error) {
 		}
 
 		config.Inbound.Allowlist = append(config.Inbound.Allowlist,
+			// Group info
+			AllowlistItem{
+				URL:               gitLabBaseUrl.JoinPath("/namespaces/:namespace").String(),
+				Methods:           ParseHttpMethods([]string{"GET"}),
+				SetRequestHeaders: headers,
+			},
 			// repo info
 			AllowlistItem{
 				URL:               gitLabBaseUrl.JoinPath("/projects/:project").String(),