[ci-scan] Skip DnsGetHostAddresses_LocalhostSubdomainWithTrailingDot on Android (refs #127965)

[github-actions]

Caution

Security scanning requires review for CI Outer-Loop Failure Scanner

Details

The threat detection results could not be parsed. The workflow output should be reviewed before merging.

Review the workflow run logs for details.

Reasoning

The test DnsGetHostAddresses_LocalhostSubdomainWithTrailingDot_ReturnsLoopback fails on Android because the Android emulator DNS resolver returns link-local and globally-routable IPv6 addresses for .localhost subdomain queries (foo.localhost., bar.test.localhost.) instead of loopback addresses. This is a platform DNS resolver behavior difference (Android does not honor RFC 6761 §6.3 for subdomains of localhost), not a .NET product bug. The [ActiveIssue] annotation on TestPlatforms.Android is the correct narrowly-scoped muting for this failure.

KBE verification (four questions):

1. Same test? Yes — DnsGetHostAddresses_LocalhostSubdomainWithTrailingDot_ReturnsLoopback.
2. Same failure signature? Yes — Assert.All() Failure: ... Expected loopback address but got: fe80::....
3. Same OS? Yes — Android.
4. Same architecture? Yes — all Android architectures (arm64, x64, x86).

Impact on platforms

• runtime-extra-platforms (def 154) + android-arm64 Mono + Windows.11.Amd64.Android.Open + no stress + exit code 1
• runtime-extra-platforms (def 154) + android-x64 Mono + Windows.11.Amd64.Android.Open + no stress + exit code 1
• runtime-extra-platforms (def 154) + android-arm64 CoreCLR + Windows.11.Amd64.Android.Open + no stress + exit code 1
• runtime-extra-platforms (def 154) + android-x64 CoreCLR + Windows.11.Amd64.Android.Open + no stress + exit code 1

Errors log

[FAIL] System.Net.NameResolution.Tests.GetHostAddressesTest.DnsGetHostAddresses_LocalhostSubdomainWithTrailingDot_ReturnsLoopback(hostName: "foo.localhost.")
Assert.All() Failure: 6 out of 7 items in the collection did not pass.
[1]: Item:  fe80::cc6b:b5ff:fe9c:4dde%30
     Error: Expected loopback address but got: fe80::cc6b:b5ff:fe9c:4dde%30

First build it occurred

First seen in build 1411505 (2026-05-07) within the scanned window. Also present in 1413202. This is computed within the scanned window and may not be the true origin.

Linked issue

Linked KBE: #127965

Note

🔒 Integrity filter blocked 19 items

The following items were blocked because they don't meet the GitHub integrity level.

• #125901 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #122311 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #114055 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #120891 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #84006 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #112841 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #83317 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #51317 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #86416 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #90084 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #77241 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #115319 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #93768 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #96506 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #90803 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #126682 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• ... and 3 more items

To allow these resources, lower min-integrity in your GitHub frontmatter:

tools:
  github:
    min-integrity: approved  # merged | approved | unapproved | none

Generated by CI Outer-Loop Failure Scanner · ● 35.9M · ◷

[dotnet-policy-service]

Tagging subscribers to this area: @dotnet/runtime-infrastructure
See info in area-owners.md if you want to be subscribed.