Adds top-level permissions and removed unused workflows.

Author: Diptorup Deb

.github/workflows/black.yml

@@ -9,6 +9,8 @@ on:
   push:
     branches: [main]
 
+permissions: read-all
+
 # A workflow run is made up of one or more jobs that can run sequentially or in parallel
 jobs:
   # This workflow contains a single job called "black"

.github/workflows/conda-package.yml

@@ -10,6 +10,8 @@ on:
       - main
       - release*
 
+permissions: read-all
+
 env:
   PACKAGE_NAME: numba-dpex
   MODULE_NAME: numba_dpex

.github/workflows/coverage.yml

@@ -9,6 +9,8 @@ on:
       - environment/coverage.yml
       - pyproject.toml
 
+permissions: read-all
+
 jobs:
   main:
     name: Generate coverage and push to Coveralls.io

.github/workflows/coverity.yml

@@ -5,6 +5,8 @@ on:
       - main
   workflow_dispatch:
 
+permissions: read-all
+
 jobs:
   Coverity:
 

.github/workflows/cpp_style_checks.yml

@@ -9,6 +9,8 @@ on:
   push:
     branches: [master]
 
+permissions: read-all
+
 jobs:
   formatting-check:
     name: clang-format

.github/workflows/docker.yml

@@ -26,6 +26,7 @@ on:
       buildkit_version:
         default: '0.11.6'
 
+permissions: read-all
 
 jobs:
   env:

.github/workflows/gh-pages.yml

@@ -13,6 +13,8 @@ on:
       - environment/docs.yml
       - .github/workflows/gh-pages.yml
 
+permissions: read-all
+
 jobs:
   main:
     if: ${{ !(github.event.pull_request && github.event.action == 'closed') }}

.github/workflows/license.yml

@@ -5,12 +5,14 @@ on:
   push:
     branches: [main]
 
+permissions: read-all
+
 jobs:
   license:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4.1.1
     - uses: actions/setup-go@v3
       with:
         go-version: '1.18'