upload code coverage from compliance tests to codecov.io

Author: japaric

.github/workflows/ci.yaml

@@ -60,6 +60,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     env:
+      SUDO_TEST_PROFRAW_DIR: /tmp/profraw
       SUDO_TEST_VERBOSE_DOCKER_BUILD: 1
       CI: true
     steps:
@@ -94,6 +95,14 @@ jobs:
           SUDO_UNDER_TEST: ours
         run: cargo test -p sudo-compliance-tests
 
+      - name: Prepare code coverage data
+        run: ./make-lcov-info.bash
+
+      - name: Upload code coverage
+        uses: codecov/codecov-action@v3
+        with:
+          files: lcov.info
+
       - name: Check that we didn't forget to gate a passing compliance test
         working-directory: test-framework
         env:

make-lcov-info.bash

@@ -0,0 +1,26 @@
+#!/bin/bash
+
+set -euo pipefail
+
+rustup component add llvm-tools
+
+llvm_profdata=$(find "$(rustc --print sysroot)" -name llvm-profdata)
+profdata="$SUDO_TEST_PROFRAW_DIR"/sudo-rs.profdata
+$llvm_profdata merge \
+	-sparse \
+	"$SUDO_TEST_PROFRAW_DIR"/**/*.profraw \
+	-o "$profdata"
+
+binary="$SUDO_TEST_PROFRAW_DIR"/sudo-rs
+dockerid=$(docker create sudo-test-rs)
+docker cp "$dockerid":/usr/bin/sudo "$binary"
+docker rm "$dockerid"
+
+llvm_cov="$(dirname "$llvm_profdata")"/llvm-cov
+$llvm_cov export \
+	-format=lcov \
+	--ignore-filename-regex='/usr/local/cargo/registry' \
+	--ignore-filename-regex='/rustc' \
+	--instr-profile="$profdata" \
+	--object "$binary" \
+	-path-equivalence=/usr/src/sudo,"$(pwd)" >lcov.info