[llvm] Users/tstellar/upload self contained (PR #213828)

[Tom Stellard via llvm-commits]

================
@@ -41,8 +41,25 @@ inputs:
 runs:
   using: "composite"
   steps:
+    - name: Check Permissions
+      uses: $/.github/workflows/require-team-membership
+      with:
+        team-slug: llvm-release-managers
+        LLVM_TOKEN_GENERATOR_CLIENT_ID: ${{ inputs.LLVM_TOKEN_GENERATOR_CLIENT_ID }}
+        LLVM_TOKEN_GENERATOR_PRIVATE_KEY: ${{ inputs.LLVM_TOKEN_GENERATOR_PRIVATE_KEY }}
+
+    # Checkout the files used by this action.
+     - uses: actions/checkout at df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+       with:
+         persist-credentials: false
+         path: upload-release-artifact
+         sparse-checkout: |
+            llvm/utils/release/github-upload-release.py
+            llvm/utils/git/requirements.txt
+         sparse-checkout-cone-mode: false
----------------
tstellar wrote:

We don't have test coverage for this action yet, but even if we did, when there is a yaml error, the CI jobs fails, but it doesn't get reported in the 'checks' section of the PR anyway, so it will get missed.

https://github.com/llvm/llvm-project/pull/213828