workflows: Add a job for auditing release assets (#92829)

This checks to ensure that uploads are only made by 'approved'
uploaders, which is just everyone who has uploaded a release asset in
the past.

We could do more, but this is just a simple implementation so we can put
something in place and see how it works.

For more discussion see:
https://discourse.llvm.org/t/rfc-improve-binary-security/78121

0 files changed, 0 insertions, 0 deletions