ci: reuse GitHub workflow

Author: Manuthor

.github/workflows/fork.yml

@@ -8,11 +8,12 @@ on:
     tags:
       - '**'
   workflow_dispatch:
+  pull_request:
+    types: [opened, synchronize, reopened]
 
 jobs:
   # Run tests in release mode for tags and scheduled runs
   main:
-    if: github.repository == 'Cosmian/kms'
     secrets: inherit
     uses: ./.github/workflows/main_base.yml
     with:

.github/workflows/main.yml

@@ -34,11 +34,41 @@ jobs:
     with:
       toolchain: ${{ inputs.toolchain }}
 
-  # ml-kem-0.2.1 does not build on toolchain 1.90.0 and cargo-semver v0.44.0.
-  # cargo-semver:
-  #   uses: Cosmian/reusable_workflows/.github/workflows/cargo-semver.yml@develop
-  #   with:
-  #     toolchain: ${{ inputs.toolchain }}
+  cargo-test:
+    name: No Nix - ${{ matrix.runner }} - ${{ matrix.type }} - ${{ matrix.features }}
+    runs-on: ${{ matrix.runner }}
+    strategy:
+      fail-fast: false
+      matrix:
+        type:
+          - sqlite
+        features: [fips, non-fips]
+        runner: [ubuntu-24.04, ubuntu-24.04-arm, macos-15]
+
+    steps:
+      - uses: dtolnay/rust-toolchain@master
+        with:
+          toolchain: 1.90.0
+          components: rustfmt, clippy
+
+      - uses: actions/checkout@v6
+        with:
+          submodules: recursive
+
+      - name: With bash test script
+        run: |
+          set -ex
+          bash .github/scripts/test_${{ matrix.type }}.sh --profile debug --variant ${{ matrix.features }}
+
+      - name: With cargo only
+        run: |
+          set -ex
+          if [ "${{ matrix.features }}" = "non-fips" ]; then
+            export FEATURES_FLAG="--features non-fips";
+          else
+            export FEATURES_FLAG="";
+          fi
+          cargo test --workspace --lib $FEATURES_FLAG -- --nocapture
 
   cargo-publish:
     name: Cargo Publish Workspace
@@ -49,6 +79,7 @@ jobs:
       token: ${{ secrets.CRATES_IO }}
 
   test: # Run all tests
+    if: github.repository == 'Cosmian/kms'
     uses: ./.github/workflows/test_all.yml
     secrets: inherit
     with:

.github/workflows/main_base.yml

@@ -97,17 +97,14 @@ allow = [
   "OpenSSL",
   "ISC",
   "Zlib",
-  "MPL-2.0",
   "BSD-2-Clause",
   "BSD-3-Clause",
   "Unicode-3.0",
   "CC0-1.0",
   "BUSL-1.1",
-  "AGPL-3.0",
-  "GPL-3.0",
+  "AGPL-3.0-or-later",
   "CDLA-Permissive-2.0",
   "GPL-3.0-or-later", # alcoholic_jwt-4091.0.0
-  "AGPL-3.0-only", # synthesized
 ]
 # The confidence threshold for detecting a license from license text.
 # The higher the value, the more closely the license text must be to the