[Slai.life (huong8373tt-beep)]

📖 Description

Resolves #6632.

When a local manifest explicitly requests --ignore-local-archive-malware-scan and the administrator setting permits that override, WinGet now skips the archive malware scan before loading the ZIP. This avoids the scan's full-archive memory allocation for approved large archive installs, including the x86 validation scenario described in the issue.

The default scan path is unchanged when the override is absent or not permitted. The installer workflow still performs the normal archive extraction and nested-installer validation steps.

🔗 References

Resolves #6632

🔍 Validation

• Added regression coverage to verify the approved override does not call Archive::ScanZipFile() and reports the skip to the user.
• Preserved coverage for scan failure when the override is not permitted.
• Parsed the updated resource XML successfully.
• git diff --check passed.
• Merge-ReleaseNotes.ps1 -Version 1.31 passed.
• A focused native C++ build was attempted, but local vcpkg dependency acquisition was blocked while downloading the Brotli source archive; the test binary was not produced or run. GitHub CI remains the full build-and-test authority for this change.

✅ Checklist

• Signed the Contributor License Agreement
• Linked to an issue
• Added a release note fragment
• Updated documentation (not applicable)
• Added or updated tests
• Updated Copilot instructions (not applicable)

🤖 AI Assistance

• AI assistance was used and has been disclosed in this PR
• No AI assistance was used

Slai Agent Runtime performed the investigation, implementation, and test execution. The account owner authorized this contribution and is responsible for its content.

📋 Issue Type

• Bug fix
• Feature
• Task

Microsoft Reviewers: Open in CodeFlow

[azure-pipelines]

Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

[JohnMcPMS]

Suggested change

	struct SetScanArchiveCalled_Override
	struct SetScanArchiveCalled_Signal

This is not an override, but a reporting mechanism.

[Copilot]

🔵 Needs a closer look

The native regression test was not built or run and mocks extraction, so Windows/x86 validation is still needed to confirm large-ZIP installation succeeds after bypassing the scan.

No open issues 🎉

What changed in this PR

Addresses #6632 by skipping local archive malware scanning before loading the ZIP when both the override flag and administrator setting permit it. This avoids the scan’s full-archive memory allocation while preserving normal scanning otherwise and leaving extraction and nested-installer validation unchanged.

Changes:

• Moves the approved override check ahead of ScanZipFile().
• Adds regression coverage confirming the scanner is not called and the skip message is displayed.
• Updates the user-facing resource and adds a release note.

File	Description
src/​AppInstallerCommonCore/​Archive.cpp	Adds a test hook to track scanner invocation.
src/​AppInstallerCLITests/​TestHooks.h	Adds a scoped wrapper for the invocation-tracking hook.
src/​AppInstallerCLITests/​InstallFlow.cpp	Verifies approved overrides skip scanning and notify users.
src/​AppInstallerCLIPackage/​Shared/​Strings/​en-us/​winget.resw	Replaces the scan-failure override message with a scan-skipped message.
src/​AppInstallerCLICore/​Workflows/​ArchiveFlow.cpp	Returns before scanning when the override is approved.
src/​AppInstallerCLICore/​Resources.h	Declares the replacement resource identifier.
doc/​release-notes/​1.31/​6632-local-archive-scan-override.md	Documents reduced memory use for approved archive scan overrides.

_{Review effort: Balanced}

[Slai.life (huong8373tt-beep)]

Applied the review suggestion in d9bc729: renamed SetScanArchiveCalled_Override to SetScanArchiveCalled_Signal, since it reports whether the scanner was called rather than overriding scan behavior. No functional behavior changed.

[JohnMcPMS]

I was also expecting that these would have the name updated as well.

[Slai.life (huong8373tt-beep)]

Addressed the maintainer naming request: the archive-called test hook is now consistently named SetScanArchiveCalled_Signal in the public test hook, implementation, and test usage. Also normalized the release-note file to end with a newline. Commit: c483e3f. Local Windows build reached the repository C++/WinRT/vcpkg stage but was blocked by the shared vcpkg filesystem lock; no code assertion failure was observed.