Update top-level permissions for OSSF complicance

.github/workflows/cpp_build_with_cmake.yml

@@ -1,4 +1,5 @@
 name: C++ build with CMake
+permissions: read-all
 
 # Controls when the action will run:
 # Triggers the workflow on push or pull request events but only for the master branch

.github/workflows/docker-image.yml

@@ -1,4 +1,5 @@
 name: Docker Image CI
+permissions: read-all
 
 on:
   push:

.github/workflows/python_build_mpi.yml

@@ -1,4 +1,5 @@
 name: Python build with MPI
+permissions: read-all
 
 # Triggers the workflow on push or pull request events but only for the master branch
 on:

.github/workflows/python_build_no_mpi.yml

@@ -1,4 +1,5 @@
 name: Python build (no MPI)
+permissions: read-all
 
 # Triggers the workflow on push or pull request events but only for the master branch
 on:

Dockerfile

@@ -41,9 +41,9 @@ RUN tar -xzf cmake-3.15.2-Linux-x86_64.tar.gz -C /usr/local/ --strip-components=
 
 # Fetch and install the Intel MKL libraries required for building the Intel-QS simulator.
 WORKDIR swpkgs/mkl
-RUN wget "https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB"
-RUN apt-key add GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
-RUN rm GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
+RUN wget "https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB"
+RUN apt-key add GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB
+RUN rm GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB
 RUN sh -c 'echo deb https://apt.repos.intel.com/mkl all main > /etc/apt/sources.list.d/intel-mkl.list'
 RUN apt-get update
 RUN apt-get install -y intel-mkl-64bit-2019.2-057

unit_test/include/random_number_generator_test.hpp

@@ -1,6 +1,7 @@
 #ifndef RANDOM_NUMBER_GENERATOR_TEST_HPP
 #define RANDOM_NUMBER_GENERATOR_TEST_HPP
 
+#include <iomanip>
 #include <map>
 
 #include "../../include/qureg.hpp"