diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b5e61a7a..8f19df18 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,8 +20,11 @@ jobs:
           toolchain: stable
           components: clippy, rustfmt
 
-      - name: Run tests
-        run: cargo test --workspace
+      - name: Run tests against unbound
+        run: cargo test --workspace --include-ignored
+
+      - name: Run tests against hickory
+        run: DNS_TEST_SUBJECT=hickory cargo test --workspace
 
       - name: Check that code is formatted
         run: cargo fmt --all -- --check
diff --git a/packages/conformance-tests/src/resolver/dns/scenarios.rs b/packages/conformance-tests/src/resolver/dns/scenarios.rs
index c6274950..a25d3bce 100644
--- a/packages/conformance-tests/src/resolver/dns/scenarios.rs
+++ b/packages/conformance-tests/src/resolver/dns/scenarios.rs
@@ -61,6 +61,7 @@ fn can_resolve() -> Result<()> {
     Ok(())
 }
 
+#[ignore]
 #[test]
 fn nxdomain() -> Result<()> {
     let needle_fqdn = FQDN("unicorn.nameservers.com.")?;
diff --git a/packages/conformance-tests/src/resolver/dnssec/scenarios.rs b/packages/conformance-tests/src/resolver/dnssec/scenarios.rs
index a3f07af8..31c5df7b 100644
--- a/packages/conformance-tests/src/resolver/dnssec/scenarios.rs
+++ b/packages/conformance-tests/src/resolver/dnssec/scenarios.rs
@@ -7,6 +7,7 @@ use dns_test::zone_file::Root;
 use dns_test::{Resolver, Result, TrustAnchor, FQDN};
 
 // no DS records are involved; this is a single-link chain of trust
+#[ignore]
 #[test]
 fn can_validate_without_delegation() -> Result<()> {
     let mut ns = NameServer::new(FQDN::ROOT)?;
@@ -46,6 +47,7 @@ fn can_validate_without_delegation() -> Result<()> {
     Ok(())
 }
 
+#[ignore]
 #[test]
 fn can_validate_with_delegation() -> Result<()> {
     let expected_ipv4_addr = Ipv4Addr::new(1, 2, 3, 4);