.github/workflows/release-asset-audit.py

import github
import sys

def main():
    token = sys.argv[1]

    gh = github.Github(login_or_token=token)
    repo = gh.get_repo("llvm/llvm-project")

    uploaders = set(
        [
            "DimitryAndric",
            "stefanp-ibm",
            "lei137",
            "omjavaid",
            "nicolerabjohn",
            "amy-kwan",
            "mandlebug",
            "zmodem",
            "androm3da",
            "tru",
            "rovka",
            "rorth",
            "quinnlp",
            "kamaub",
            "abrisco",
            "jakeegan",
            "maryammo",
            "tstellar",
            "github-actions[bot]",
        ]
    )

    for release in repo.get_releases():
        print("Release:", release.title)
        for asset in release.get_assets():
            created_at = asset.created_at
            updated_at = (
                "" if asset.created_at == asset.updated_at else asset.updated_at
            )
            print(
                f"{asset.name} : {asset.uploader.login} [{created_at} {updated_at}] ( {asset.download_count} )"
            )
            if asset.uploader.login not in uploaders:
                with open('comment', 'w') as file:
                    file.write(f'@{asset.uploader.login} is not a valid uploader.')
                sys.exit(1)


if __name__ == "__main__":
    main()