Process completed with exit code 2.

1 safe output(s) failed: - push_to_pull_request_branch: Review branch push rejected: the branch includes changes to workflow files (.github/workflows/**) requiring the 'workflows' scope. The token used for the safe-outputs checkout does not have this scope. Fix: configure 'push-to-pull-request-branch.allow-workflows: true' with a GitHub App in 'safe-outputs.github-app', or exclude workflow files from the changeset.

✗ Message 1 (push_to_pull_request_branch) failed: Review branch push rejected: the branch includes changes to workflow files (.github/workflows/**) requiring the 'workflows' scope. The token used for the safe-outputs checkout does not have this scope. Fix: configure 'push-to-pull-request-branch.allow-workflows: true' with a GitHub App in 'safe-outputs.github-app', or exclude workflow files from the changeset.

To allow this workflow to push workflow file changes, configure 'push-to-pull-request-branch.allow-workflows: true' together with a GitHub App in 'safe-outputs.github-app'.

Review branch push rejected: the branch includes changes to workflow files (.github/workflows/**) that require the 'workflows' scope on the push token.

Detection result file not found at: /tmp/gh-aw/threat-detection/detection_result.json (execution outcome: failure); continuing because GH_AW_DETECTION_CONTINUE_ON_ERROR=true

1 message(s) failed to process

⚠️ report_incomplete: Unable to append the PR changeset section because update_pull_request is unavailable in this workflow context.

⚠️ Code push operation 'push_to_pull_request_branch' failed — continuing with remaining safe outputs (add_comment messages will include a failure note)

Could not check branch protection rules for "copilot/ca-cli-version-updates-again" (insufficient permissions): Resource not accessible by integration - https://docs.github.com/rest/branches/branch-protection#get-branch-protection