[ci-scan] Test failure: ConfigurationTests.TouchingFileWillReloadForUserSecrets UnauthorizedAccessException on Apple mobile

[github-actions]

Summary

Microsoft.Extensions.Configuration.Test.ConfigurationTests.TouchingFileWillReloadForUserSecrets fails on Apple mobile targets (tvOS / maccatalyst) in the runtime-extra-platforms pipeline (definition 154). The test attempts to write user-secrets under ~/.microsoft inside the app sandbox and is denied by the platform, throwing System.UnauthorizedAccessException. The failure reproduces on the tvos-arm64 Release AllSubsets_CoreCLR leg of the source build and persists into the follow-up build, so it is a stable, non-transient signature.

Build error leg or test failing: tvos-arm64 Release AllSubsets_CoreCLR — Microsoft.Extensions.Configuration.Functional.Tests work item.

Pipeline: runtime-extra-platforms (definition 154), branch main.

Error Message

{
  "ErrorMessage": [
    "[FAIL] Microsoft.Extensions.Configuration.Test.ConfigurationTests.TouchingFileWillReloadForUserSecrets",
    "System.UnauthorizedAccessException : Access to the path",
    "/.microsoft' is denied."
  ],
  "ErrorPattern": "",
  "BuildRetry": false,
  "ExcludeConsoleLog": false
}

Build information

• First build it occurred: 1545668
• Follow-up build still reproducing: 1546065
• Failing leg: tvos-arm64 Release AllSubsets_CoreCLR, work item Microsoft.Extensions.Configuration.Functional.Tests

The test writes user-secrets to ~/.microsoft and touches the file to trigger a config reload; on the Apple mobile sandbox the directory is not writable, so the file watcher setup throws UnauthorizedAccessException (---- System.IO.IOException : Operation not permitted).

---

Filed by the CI outer-loop failure scanner (ci-failure-scan). This issue was created automatically for Build Analysis correlation. Mitigation is handled separately by ci-failure-fix.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by CI Outer-Loop Failure Scanner · 991.1 AIC · ⌖ 18.2 AIC · ⊞ 18.3K · ◷

Report

Build	Repository	Test	Pull Request
1554672	dotnet/runtime	Microsoft.Extensions.Configuration.Functional.Tests.WorkItemExecution
1554343	dotnet/runtime	Microsoft.Extensions.Configuration.Functional.Tests.WorkItemExecution
1554235	dotnet/runtime	Microsoft.Extensions.Configuration.Test.ConfigurationTests.TouchingFileWillReloadForUserSecrets	#132348
1553120	dotnet/runtime	Microsoft.Extensions.Configuration.Functional.Tests.WorkItemExecution
1552059	dotnet/runtime	Microsoft.Extensions.Configuration.Test.ConfigurationTests.TouchingFileWillReloadForUserSecrets	#132216
1552117	dotnet/runtime	Microsoft.Extensions.Configuration.Functional.Tests.WorkItemExecution	#132274
1551332	dotnet/runtime	Microsoft.Extensions.Configuration.Functional.Tests.WorkItemExecution
1550345	dotnet/runtime	Microsoft.Extensions.Configuration.Functional.Tests.WorkItemExecution	#132216
1549654	dotnet/runtime	Microsoft.Extensions.Configuration.Test.ConfigurationTests.TouchingFileWillReloadForUserSecrets
1549539	dotnet/runtime	Microsoft.Extensions.Configuration.Functional.Tests.WorkItemExecution
1547725	dotnet/runtime	Microsoft.Extensions.Configuration.Functional.Tests.WorkItemExecution	#132112
1547473	dotnet/runtime	Microsoft.Extensions.Configuration.Functional.Tests.WorkItemExecution	#131783

Summary

24-Hour Hit Count	7-Day Hit Count	1-Month Count
1	12	12

[dotnet-policy-service]

Tagging subscribers to this area: @dotnet/area-extensions-configuration
See info in area-owners.md if you want to be subscribed.