Add security policy, test GITHUB_TOKEN permissions.

.github/workflows/clean-gcloud-profiles.yml

@@ -16,6 +16,7 @@
 # happens, run this workflow manually to clean up the login profiles.
 
 name: Clean GCloud Profiles
+permissions: read
 
 on:
   workflow_dispatch:

.github/workflows/documentation.yml

@@ -1,4 +1,5 @@
 name: Documentation
+permissions: read
 
 on:
   workflow_dispatch:

.github/workflows/macos.yml

@@ -1,4 +1,5 @@
 name: MacOS
+permissions: read
 
 on:
   workflow_dispatch:

.github/workflows/style.yml

@@ -1,4 +1,5 @@
 name: Style Check
+permissions: read
 
 on:
   workflow_dispatch:

.github/workflows/ubuntu-cuda.yml

@@ -1,4 +1,5 @@
 name: Ubuntu CUDA
+permissions: read
 
 on:
   workflow_dispatch:

.github/workflows/ubuntu-openblas.yml

@@ -1,4 +1,5 @@
 name: Ubuntu OpenBLAS
+permissions: read
 
 on:
   workflow_dispatch:

.github/workflows/ubuntu-sycl.yml

@@ -1,4 +1,5 @@
 name: Ubuntu SYCL
+permissions: read
 
 on:
   workflow_dispatch:

.github/workflows/ubuntu-wheel.yml

@@ -1,4 +1,5 @@
 name: Ubuntu Wheel
+permissions: read
 
 on:
   workflow_dispatch:

.github/workflows/ubuntu.yml

@@ -1,4 +1,5 @@
 name: Ubuntu
+permissions: read
 
 on:
   workflow_dispatch:

.github/workflows/vtk_packages.yml

@@ -1,4 +1,5 @@
 name: VTK Packages
+permissions: read
 
 on:
   # pull_request:

.github/workflows/webrtc.yml

@@ -1,4 +1,5 @@
 name: WebRTC
+permissions: read
 
 on:
   workflow_dispatch:

.github/workflows/windows.yml

@@ -1,4 +1,5 @@
 name: Windows
+permissions: read
 
 on:
   workflow_dispatch:

SECURITY.md

@@ -0,0 +1,5 @@
+# Security Policy
+Intel is committed to rapidly addressing security vulnerabilities affecting our customers and providing clear guidance on the solution, impact, severity and mitigation. 
+
+## Reporting a Vulnerability
+Please report any security vulnerabilities in this project utilizing the guidelines [here](https://www.intel.com/content/www/us/en/security-center/vulnerability-handling-guidelines.html).