Find files shared outside your company

from google.oauth2.credentials import Credentials
from googleapiclient.discovery import build
from clickruntime import on_trigger, credentials, notify

DOMAIN = "mycompany.com"

@on_trigger
def run(event):
    drive = build("drive", "v3", credentials=Credentials(credentials.connection("google", "work")), cache_discovery=False)
    lines, token = [], None
    while True:
        page = drive.files().list(q="'me' in owners and trashed = false", pageSize=200, pageToken=token,
                                  fields="nextPageToken, files(name,webViewLink,permissions(type,emailAddress,role))").execute()
        for f in page["files"]:
            risky = [("anyone with the link" if p["type"] == "anyone" else p["emailAddress"])
                     for p in f.get("permissions", [])
                     if p["type"] == "anyone" or (p.get("emailAddress") and not p["emailAddress"].endswith("@" + DOMAIN))]
            if risky:
                lines.append(f"{f['name']}: {', '.join(risky)}\n{f['webViewLink']}")
        token = page.get("nextPageToken")
        if not token:
            break
    notify.email_me(f"{len(lines)} files shared outside {DOMAIN}", "\n\n".join(lines) or "Nothing shared outside.")
    return {"files": len(lines)}