[build] add code coverage report to workflow summary by zimmy87 · Pull Request #167 · Azure/azihsm-sdk

zimmy87 · 2026-02-11T23:32:39Z

No description provided.

* Snapshot from main: 12/11/2025, top-level folder name update, and various fixes for actions * trigger actions on dev

* snapshot from main: 1/5/2026 * various action fixes * fix setup step in windows action * update install-symcrypt.ps1 * fix install_symcrypt xtask * add copyright to install-symcrypt.ps1

* Add toml formatting support * Force LF line endings for TOML files so taplo works fine on Windows * Move location of .gitattributes

* snapshot from main: 1/8/26 055aa926e * Remove symcrypt from SDK completely * Remove symcrypt from actions * update taplo.toml

* add stages to precheck xtask * update actions to use precheck stages

* add audit xtask * fix audit version number & fmt error * fix RUSTSEC-2024-0436, deny warnings in audit xtask, and remove unused paste dependencies

* Merge native api * [BUILD] Remove Native API Build & Test in pipelines * [feat] ECC KeyGen and one-shot and streaming Sign/Verify native API (#22) * ECC KeyGen Native API * ECC Sign/Verify one-shot native API * ECC Sign/Verify streaming native API * Moving dispatch to FFI boundary * Moving key generation to specific modules * Added HMAC support in napi (#23) * Added HMAC support in napi * added HMAC tests * fixed clippy warning * Added Key Convertion from HsmGenericSecret key into Aes or Hmac * [feat] RSA wrapping keypair gen + SHA one-shot + SHA streaming native API (#26) * RSA key unwrapping key pair generation * SHA one-shot native api * SHA streaming native api * [fix] Fixed HMAC Verify Context (#27) * Added HMAC support in napi * added HMAC tests * fixed clippy warning * Added Key Convertion from HsmGenericSecret key into Aes or Hmac * Added HMAC Verify Context * Validate AES Key Properties (#28) * initial key properties check * Added key prop test cases * added HsmKeyPropFlags check * Addressing review comments * added test to validate token AES key gen * [feat] HMAC one-shot and streaming native API (#29) HMAC one-shot and streaming native API * Ecc key prop validation (#31) * added key prop validation for ECC * added rust doc comments * Fixed clippy warning --------- Co-authored-by: Rajesh Gali <rajeshgali@microsoft.com> * Validate RSA properties (#32) Co-authored-by: Rajesh Gali <rajeshgali@microsoft.com> * Implement cpp code formatting check/fix via xtask fmt * Fix clippy errors * [build] Add cpp code formatting checks (#34) * Implement cpp code formatting check/fix via xtask fmt * Fix clippy errors * Fix audit violation for atty * Check Generic Secret Key properties (#33) Co-authored-by: Rajesh Gali <rajeshgali@microsoft.com> * [feat] Key Unwrap, RSA Encrypt/Decrypt, RSA Sign/Verify Native API (#35) * Remove audit.toml and fix typo in cargo xtask main * Fix windows build break * [build] Cleanup for merge to devi This commit contains following 1. Delete old api folder 2. Rename napi folder to api 3. Integrate OpenSSL Provider into the build system * Fix build break * Disable clang-format in pipeline * Fix build break in ossl provider * Implement Key Unmasking for AES, ECC & RSA Keys (#36) This pull request implements key unmasking functionality for AES, ECC, and RSA keys, allowing keys to be reconstructed from their masked representation. The PR also includes API renaming (RsaAesKeywrap → RsaAesKeyWrap) and removes unused key property functions. Changes: Implements key unmasking traits and algorithms for AES, ECC, and RSA keys Adds masked key parsing infrastructure to extract key properties from masked key blobs Refactors existing tests and adds comprehensive unmask tests for all key types Renames algorithm identifier from RsaAesKeywrap to RsaAesKeyWrap across codebase Removes unused key property flags and methods (PRIVATE, MODIFIABLE, COPYABLE, DESTROYABLE, ALWAYS_SENSITIVE, NEVER_EXTRACTABLE) Updates check_supported_flags to allow SENSITIVE, EXTRACTABLE, and LOCAL flags universally * [feat] RSA Sign/Verify Streaming Native API * [feat] Add key unmasking and property API enhancements (#37) * [feat] Add key unmasking and property API enhancements This commit implements key unmasking capabilities for AES, RSA, and ECC keys, allowing keys to be restored from their masked (encrypted) state. It also standardizes key property handling and updates the native C API to support these features. Key changes: - Add azihsm_key_unmask() for symmetric keys (AES) - Add azihsm_key_unmask_pair() for asymmetric key pairs (RSA, ECC) - Implement unmask operations in algo modules (aes, rsa, ecc) - Rename azihsm_keypair_unwrap to azihsm_key_unwrap_pair for consistency - Enhance azihsm_key_get_prop to support all key types - Refactor shared_types.rs to use zerocopy derives and remove TryFrom impls - Simplify error handling in masked_key.rs (use return instead of Err?) - Update key property IDs to match revised documentation - Add copy_to_key_prop helper for property buffer management - Add comprehensive tests for key unmasking operations - Update documentation to reflect new key property IDs * Fix OSSL Provider * [refactor] Rename AZIHSM_ERROR to AZIHSM_STATUS --------- Co-authored-by: Vishal Mhatre <38512878+mhatrevi@users.noreply.github.com> Co-authored-by: Rajesh Gali <g.rajesh@live.com> Co-authored-by: Rajesh Gali <rajeshgali@microsoft.com> Co-authored-by: Vishal Mhatre <vishal.mhatre@gmail.com>

Signed-off-by: Christian Walter <christian.walter@9elements.com>

) * [feat] Add slice-based API for AES XTS fast path operations * [feat] Add slice-based API for AES XTS fast path operations * Addressing PR feedback: Iteration 1

Key Attestation Native API

* Adding copilot-instructions.md * Resolve copilot PR feedback * Resolve PR feedback

* install cargo-llvm-cov in setup xtask * add coverage xtask & enable in actions * update coverage report location in actions * fix fmt errors * merge branch 'dev' into users/v-davidz/add_cargo-llvm-cov & fix windows 'os error 3' * attempt fix of missing cobertura_sdk.xml artifact on ubuntu * remove console coverage report, fix exclusion of xtask coverage data, & debug missing coverage artifacts on ubuntu * fix ./target/report location & remove debug step in actions * disable code coverage stage in local precheck

* Update copilot instructions * Update .github/copilot-instructions.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* add check to validate device returned key props * fixed clippy warning * updated keybit len in CPP HMAC SH512 test * Added ECDH Device property checks * addressing copilot comments * Addressing review comments --------- Co-authored-by: Rajesh Gali <rajeshgali@microsoft.com>

* Initial plan * Update fmt command to use nightly toolchain Co-authored-by: jaygmsft <22506014+jaygmsft@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: jaygmsft <22506014+jaygmsft@users.noreply.github.com> Co-authored-by: Jayant Gandhi <jayg@microsoft.com>

* Initial plan * Remove duplicate copyright line from hash_sign_tests.rs Co-authored-by: jaygmsft <22506014+jaygmsft@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: jaygmsft <22506014+jaygmsft@users.noreply.github.com>

* Initial plan * Add copilot-setup-steps.yml for GitHub Copilot coding agent Co-authored-by: jaygmsft <22506014+jaygmsft@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: jaygmsft <22506014+jaygmsft@users.noreply.github.com>

This commit adds sha1, sha256, sha384 and sha512 dgst operation. Signed-off-by: Christian Walter <christian.walter@9elements.com>

* fix: CodeQL Fixes Signed-off-by: Christian Walter <christian.walter@9elements.com> * feat: add NO_FOLLOW to open Signed-off-by: Christian Walter <christian.walter@9elements.com> --------- Signed-off-by: Christian Walter <christian.walter@9elements.com>

Copilot

Pull request overview

Adds an xtask subcommand to generate a Markdown code coverage summary and publishes it into the GitHub Actions workflow summary as part of CI reporting.

Changes:

Generate an llvm-cov JSON summary report alongside existing Cobertura/XML and HTML outputs.
Add a new xtask coverage-report (and precheck --coverage-report) command to render a Markdown table from the JSON report.
Update CI workflow to invoke the new coverage summary step.

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
xtask/src/precheck.rs	Adds `--coverage-report` stage and runs it in precheck flow.
xtask/src/main.rs	Registers the new `CoverageReport` subcommand/module.
xtask/src/coverage_report.rs	New implementation that reads `sdk-cov.json` and writes a Markdown summary.
xtask/src/coverage.rs	Adds generation of `sdk-cov.json` via `cargo llvm-cov report --json --summary-only`.
xtask/Cargo.toml	Adds `jzon` dependency for JSON parsing in `xtask`.
Cargo.toml	Adds workspace version pin for `jzon`.
.github/workflows/rust.yml	Invokes `cargo xtask precheck --coverage-report` in Ubuntu/Windows jobs.

zimmy87 and others added 30 commits December 11, 2025 17:24

Initial commit

75dc735

* Snapshot from main: 12/11/2025, top-level folder name update, and various fixes for actions * trigger actions on dev

Snapshot from main: 1/6/2026 (#11)

4d50a08

* snapshot from main: 1/5/2026 * various action fixes * fix setup step in windows action * update install-symcrypt.ps1 * fix install_symcrypt xtask * add copyright to install-symcrypt.ps1

Update code owners (#12)

0b529c4

snapshot from main: 1/8/26 8517678ca (#17)

5f1f0f3

[feature] Add toml formatting support (#13)

1d88821

* Add toml formatting support * Force LF line endings for TOML files so taplo works fine on Windows * Move location of .gitattributes

snapshot from main: 1/8/26 6a1187a4c (#21)

1ee29d3

* snapshot from main: 1/8/26 055aa926e * Remove symcrypt from SDK completely * Remove symcrypt from actions * update taplo.toml

add stages to precheck xtask (#24)

280a3d1

* add stages to precheck xtask * update actions to use precheck stages

add audit xtask (#25)

1be7851

* add audit xtask * fix audit version number & fmt error * fix RUSTSEC-2024-0436, deny warnings in audit xtask, and remove unused paste dependencies

run audit precheck stage in actions (#30)

7d0ebbe

Fix cargo Collison warnings (#42)

76d07e1

fix: rename provider from azishm to azihsm (#46)

5e9d9af

Signed-off-by: Christian Walter <christian.walter@9elements.com>

[feat] Implement Asymmetric Key Report Generation (#44)

ef72d84

[test] Native test update (#45)

ebf6038

[feat] Add slice-based API for AES XTS and GCM fast path operations (#50

809f065

) * [feat] Add slice-based API for AES XTS fast path operations * [feat] Add slice-based API for AES XTS fast path operations * Addressing PR feedback: Iteration 1

Consolidate DdiReqHdr construction with a single builder function (#51)

d42e44f

[feat] Key Attestation Native API (#52)

a6db2b2

Key Attestation Native API

[feat] Add github copilot instructions (#53)

30b985c

* Adding copilot-instructions.md * Resolve copilot PR feedback * Resolve PR feedback

upgrade ubuntu in actions to 24.04 (#57)

baae2b5

[update] AES native API udpate + misc fixes (#54)

4da74c8

Add support for retrieving device cert chain (#60)

426dc0e

Add merge_group trigger to Rust workflow (#63)

ad67521

Update copilot instructions (#62)

c2670cb

* Update copilot instructions * Update .github/copilot-instructions.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

[ci] Remove redundant test steps (#71)

e69033e

feat: add dgst operations for sha1, sha256, sha384, sha512 (#47)

f840bd8

This commit adds sha1, sha256, sha384 and sha512 dgst operation. Signed-off-by: Christian Walter <christian.walter@9elements.com>

walterchris and others added 9 commits February 17, 2026 16:57

Code QL Fixes (#175)

891a382

* fix: CodeQL Fixes Signed-off-by: Christian Walter <christian.walter@9elements.com> * feat: add NO_FOLLOW to open Signed-off-by: Christian Walter <christian.walter@9elements.com> --------- Signed-off-by: Christian Walter <christian.walter@9elements.com>

feat: add RSA-PKCS1 and RSA-OAEP encryption (#139)

c1d8427

ignore closures in tallying coverage data

a464c78

fix fmt errors

7af4b32

fix clippy error

4351de1

fix fmt error

9a6b6cb

Fix more CodeQL issues (#181)

98ddcc5

Merge branch 'dev' into users/v-davidz/add_cov_report

42cca77

Merge branch 'main' into users/v-davidz/add_cov_report

1bbf15a

zimmy87 changed the base branch from dev to main February 18, 2026 23:02

zimmy87 added 4 commits February 18, 2026 17:58

parse json instead of xml

252fe8f

remove quick-xml dependency

55d5c73

fix fmt errors

e672ff2

Merge branch 'main' into users/v-davidz/add_cov_report

8efbe3e

zimmy87 marked this pull request as ready for review February 19, 2026 19:03

zimmy87 changed the title ~~add code coverage report to workflow summary~~ [build] add code coverage report to workflow summary Feb 19, 2026

zimmy87 added 3 commits February 23, 2026 10:35

Merge branch 'main' into users/v-davidz/add_cov_report

e73b0bc

add header to code coverage report

4e7a942

fix code coverage header text

f837331

jaygmsft requested a review from Copilot February 24, 2026 18:42

Copilot started reviewing on behalf of jaygmsft February 24, 2026 18:43 View session

Copilot AI reviewed Feb 24, 2026

View reviewed changes

Comment thread xtask/src/coverage_report.rs

Comment thread xtask/src/coverage_report.rs Outdated

Comment thread xtask/src/coverage_report.rs

Comment thread .github/workflows/rust.yml

Comment thread .github/workflows/rust.yml

zimmy87 and others added 4 commits February 24, 2026 14:55

copilot feedback

06142e6

fix fmt errors

5e61ca8

Merge branch 'main' into users/v-davidz/add_cov_report

a7631ec

Merge branch 'main' into users/v-davidz/add_cov_report

e29a60e

jaygmsft enabled auto-merge (squash) February 25, 2026 03:46

jaygmsft approved these changes Feb 25, 2026

View reviewed changes

jaygmsft merged commit 50df49d into main Feb 25, 2026
6 checks passed

zimmy87 deleted the users/v-davidz/add_cov_report branch February 26, 2026 00:03

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[build] add code coverage report to workflow summary#167

[build] add code coverage report to workflow summary#167
jaygmsft merged 123 commits intomainfrom
users/v-davidz/add_cov_report

zimmy87 commented Feb 11, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

10 participants

Conversation

zimmy87 commented Feb 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

10 participants

zimmy87 commented Feb 11, 2026 •

edited

Loading