Ignore private changes and comments

Do not process events from changes which are either
private or belong to branches where anonymous user
doesn't have access (e.g. refs/meta/config branches).

If it's not readable by anonymous user - don't run it.

Signed-off-by: Karol Latecki <[email protected]>

Author: karlatec

.github/workflows/gerrit-false-positives-handler.yml

@@ -60,9 +60,16 @@ jobs:
         fi
 
         # Get latest info about a change itself
-        curl -s -X GET "https://review.spdk.io/a/changes/spdk%2Fspdk~${{ env.change_num }}?o=DETAILED_ACCOUNTS&o=MESSAGES&o=LABELS&o=SKIP_DIFFSTAT" \
-        --user "${{ secrets.GERRIT_BOT_USER }}:${{ secrets.GERRIT_BOT_HTTP_PASSWD }}" \
-        | tail -n +2 > change.json
+        curl -s -X GET "https://review.spdk.io/changes/spdk%2Fspdk~${{ env.change_num }}?o=DETAILED_ACCOUNTS&o=LABELS&o=SKIP_DIFFSTAT" > curl_result.txt
+
+        if grep "Not found" curl_result.txt; then
+          echo "Ignore. Change ${{ env.change_num }} not found, exiting."
+          echo "Either it's a private change or in restricted branch."
+          exit 0
+        fi
+
+        tail -n +2 curl_result.txt > change.json
+        rm -f curl_result.txt
 
         # Do not test any change marked as WIP
         ready_for_review="$(jq -r '.has_review_started' change.json)"

.github/workflows/gerrit-webhook-handler.yml

@@ -45,9 +45,16 @@ jobs:
         set -x
 
         # Get latest info about a change itself
-        curl -s -X GET "https://review.spdk.io/a/changes/spdk%2Fspdk~${{ env.change_num }}?o=DETAILED_ACCOUNTS&o=LABELS&o=SKIP_DIFFSTAT" \
-        --user "${{ secrets.GERRIT_BOT_USER }}:${{ secrets.GERRIT_BOT_HTTP_PASSWD }}" \
-        | tail -n +2 > change.json
+        curl -s -X GET "https://review.spdk.io/changes/spdk%2Fspdk~${{ env.change_num }}?o=DETAILED_ACCOUNTS&o=LABELS&o=SKIP_DIFFSTAT" > curl_result.txt
+
+        if grep "Not found" curl_result.txt; then
+          echo "Change ${{ env.change_num }} not found, exiting."
+          echo "Either it's a private change or in restricted branch."
+          gh run cancel ${{ github.run_id }} -R ${{ github.repository }}
+        fi
+
+        tail -n +2 curl_result.txt > change.json
+        rm -f curl_result.txt
 
         # Do not test any change marked as WIP
         ready_for_review="$(jq -r '.has_review_started' change.json)"