TheRock : Code Coverage

.github/actions/setup_test_environment/action.yml

@@ -21,6 +21,13 @@ inputs:
   ARTIFACT_RUN_ID:
     description: (string) Run ID to download artifacts from (`env.ARTIFACT_RUN_ID` or a value like `19716407405`)
     required: true
+  RUN_GITHUB_REPO:
+    description: >-
+      (string) Repository owning ARTIFACT_RUN_ID, in 'owner/repo' form. Only
+      needed when the run belongs to another repository, such as a rockrel
+      release nightly; the bucket lookup queries the run through the API and
+      fails if it looks in the wrong place. Defaults to this repository.
+    default: ""
   FETCH_ARTIFACT_ARGS:
     description: (string) Extra arguments to install_rocm_from_artifacts.py (e.g. `--blas --tests`)
   RELEASE_TYPE:
@@ -68,6 +75,7 @@ runs:
         ARTIFACT_GROUP: ${{ inputs.ARTIFACT_GROUP }}
         AMDGPU_TARGETS: ${{ inputs.AMDGPU_TARGETS }}
         ARTIFACT_RUN_ID: ${{ inputs.ARTIFACT_RUN_ID }}
+        RUN_GITHUB_REPO: ${{ inputs.RUN_GITHUB_REPO }}
         FETCH_ARTIFACT_ARGS: ${{ inputs.FETCH_ARTIFACT_ARGS }}
         RELEASE_TYPE: ${{ inputs.RELEASE_TYPE }}
         GITHUB_TOKEN: ${{ github.token }}
@@ -76,6 +84,7 @@ runs:
       run: |
         python ./build_tools/install_rocm_from_artifacts.py \
           --run-id=${ARTIFACT_RUN_ID} \
+          ${RUN_GITHUB_REPO:+--run-github-repo=${RUN_GITHUB_REPO}} \
           --artifact-group=${ARTIFACT_GROUP} \
           --amdgpu-targets=${AMDGPU_TARGETS} \
           --output-dir=${OUTPUT_ARTIFACTS_DIR} \

.github/workflows/coverage_nightly_pr_check.yml

@@ -0,0 +1,121 @@
+# Copyright Advanced Micro Devices, Inc.
+# SPDX-License-Identifier: MIT
+
+# TEMPORARY. Delete this file, and the workflow_call trigger it relies on,
+# before merging the coverage PR.
+#
+# multi_arch_ci_coverage_nightly.yml is triggered by hand, but a
+# workflow_dispatch only appears once the file is on the default branch. There
+# is therefore no way to run it from a branch and no way to see it in a PR's
+# checks, which leaves the phase 1 work unable to demonstrate the one thing it
+# exists to demonstrate.
+#
+# A caller has no such restriction: paths under ./.github/workflows resolve
+# against the caller's own commit, so this runs the branch's copy of the
+# coverage workflow and its jobs report as checks on this PR.
+#
+# This is scaffolding, not part of the design. Coverage on presubmit is exactly
+# what the phase 1 scope rejects: one run is a multi-hour instrumented build
+# plus a full test suite, which is why coverage is a separate, manually
+# triggered workflow in the first place. Leaving this in place would charge
+# that cost to every PR touching coverage.
+
+name: Coverage Nightly PR Check
+
+on:
+  pull_request:
+    # Narrow on purpose. Every run here is a multi-hour instrumented build, so
+    # only the files carrying coverage logic are worth spending one on.
+    paths:
+      - ".github/workflows/coverage_nightly_pr_check.yml"
+      - ".github/workflows/multi_arch_ci_coverage_nightly.yml"
+      - ".github/workflows/multi_arch_ci_coverage_linux.yml"
+      - ".github/workflows/test_component.yml"
+      - "build_tools/github_actions/configure_coverage_ci.py"
+      - "build_tools/github_actions/overlay_coverage_artifacts.py"
+      - "build_tools/github_actions/merge_coverage_report.py"
+      - "cmake/therock_subproject.cmake"
+      - "CMakeLists.txt"
+
+concurrency:
+  # A later push supersedes this run. Queueing multi-hour instrumented builds
+  # behind each other, to report on code that has already been replaced, only
+  # occupies build nodes the rest of CI needs.
+  group: coverage-nightly-pr-check-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+jobs:
+  coverage:
+    name: Coverage
+    uses: ./.github/workflows/multi_arch_ci_coverage_nightly.yml
+    secrets: inherit
+    # A called workflow cannot hold more than its caller, so these are granted
+    # here even though the coverage workflow declares them itself: id-token for
+    # the AWS role the artifact fetches assume, actions:read for the baseline
+    # run lookup.
+    permissions:
+      contents: read
+      actions: read
+      id-token: write
+    with:
+      # Pinned rather than resolved, so that a change in the report means a
+      # change in this branch.
+      #
+      # ROCm/rockrel run 34068476531, "Multi-Arch Release (nightly)" on main,
+      # 2026-09-07, succeeded. A real nightly rather than a CI run, because
+      # that is what a dispatched coverage run will be given in practice and
+      # the phase 1 PoC is worth exercising against the real thing.
+      #
+      # Being a rockrel run is safe here. Its artifacts embed the workspace
+      # they were built in (/__w/rockrel/rockrel), which breaks any consumer
+      # that configures CMake against them, but this workflow never does: it
+      # builds the instrumented stack from source in its own workspace and
+      # only installs the baseline on the test runner, where prebuilt binaries
+      # are executed and no package config is read.
+      #
+      # Verified before pinning that this run publishes artifacts covering
+      # every selected project: blas, fft, hipdnn, rand, solver and
+      # sparse. Not all are per-target -- hipdnn is generic throughout and
+      # solver's tests are generic -- so checking only for _gfx942 understates
+      # what is there.
+      baseline_run_id: "34068476531"
+      # The bucket lookup queries the run through the GitHub API, so it has to
+      # be told where the run lives; ROCm/TheRock returns 404 for a rockrel id.
+      baseline_repository: "ROCm/rockrel"
+      # That run published to therock-nightly-artifacts, which is the default,
+      # but naming it keeps the pin and its channel in one place.
+      baseline_release_type: "nightly"
+      amdgpu_families: "gfx94X-dcgpu"
+      # Every rocm-libraries project that builds a shared library. Run
+      # 34135220913 proved the path end to end on hipRAND -- instrumented
+      # build, baseline install, overlay, tests and a 77% report -- once
+      # libclang_rt.profile_rocm.a's own dependencies (-ldl, -lpthread) were
+      # added to the link line, which had been failing every instrumented
+      # binary before that. Run 34164420766 then took the instrumented build
+      # of all twelve green and reported six of them; the six that failed are
+      # what the host-only scoping, the timeout floor and the two registry
+      # corrections in this branch are for.
+      #
+      # Named explicitly rather than using rocm_libraries_all because the four
+      # header-only projects (hipCUB, rocPRIM, rocThrust, rocWMMA) are left
+      # out. They have no library of their own to instrument, so they report
+      # against instrumented test binaries instead, and their inline code is
+      # the linkonce_odr case the overlay cannot fully isolate. Worth doing,
+      # but worth doing separately.
+      #
+      # rccl and rocshmem are absent because they are not selectable: they
+      # live in comm-libs, which has no build job here. Both are also blocked
+      # upstream -- rccl's CMake refuses coverage outside a Debug build, and
+      # rocshmem fails on coverage plus HIP relocatable device code.
+      #
+      # hipBLASLt and hipTensor are absent for the same reason they are absent
+      # from the default selection: neither instrumented build links. See their
+      # blocked_reason in configure_coverage_ci.py. hipTensor was still in this
+      # list for run 34201973090, which is how its failure was found: the two
+      # registry corrections meant it was instrumented for the first time, and
+      # a stage is built as a unit, so its link error failed math-libs and
+      # skipped the report for all twelve.
+      projects_to_test: >-
+        hipblas,hipdnn,hipfft,hiprand,hipsolver,
+        hipsparselt,rocblas,rocfft,rocrand,rocsolver,rocsparse
+      test_type: "standard"

.github/workflows/multi_arch_build_portable_linux_artifacts.yml

@@ -49,6 +49,13 @@ on:
         required: false
         default: ""
         description: "CMake preset name for this build variant (optional)"
+      extra_cmake_options:
+        type: string
+        required: false
+        default: ""
+        description: >-
+          Extra -D options appended to the configure command, after the
+          stage-derived arguments. Used by variant builds such as coverage.
       release_type:
         description: 'Release type; controls artifact bucket and IAM role'
         type: string
@@ -194,7 +201,8 @@ jobs:
             ${{ inputs.build_variant_cmake_preset && format('--preset={0}', inputs.build_variant_cmake_preset) }} \
             ${{ inputs.external_repo_config != '' && format('-DTHEROCK_{0}_SOURCE_DIR={1}', fromJSON(inputs.external_repo_config).source_package, fromJSON(inputs.external_repo_config).checkout_path) || '' }} \
             ${{ inputs.external_repo_config != '' && fromJSON(inputs.external_repo_config).extra_cmake_options || '' }} \
-            ${{ steps.stage_config.outputs.cmake_args }}
+            ${{ steps.stage_config.outputs.cmake_args }} \
+            ${{ inputs.extra_cmake_options }}
 
       - name: Build stage
         run: |