[aw] Crane failed

### Workflow Failure

**Workflow:** [Crane](#)
**Branch:** main
**Run:** https://github.com/githubnext/apm/actions/runs/26247218124

**🛡️ Protected Files**: The code push was refused because the patch modifies protected files (package manifests, agent instruction files, or repository security configuration). This protection guards against unintended supply chain changes.

**Blocked Operations:**
- `push_to_pull_request_branch`: Cannot push to pull request branch: patch modifies protected files (.github/workflows/agentics-maintenance.yml, .github/workflows-disabled/agentics-maintenance.yml, .github/workflows/auth-acceptance.yml, .github/workflows-disabled/auth-acceptance.yml, .github/workflows/build-release.yml, .github/workflows-disabled/build-release.yml, .github/workflows/ci-integration.yml, .github/workflows-disabled/ci-integration.yml, .github/workflows/ci-runtime.yml, .github/workflows-disabled/ci-runtime.yml, .github/workflows/ci.yml, .github/workflows-disabled/ci.yml, .github/workflows/cli-consistency-checker.lock.yml, .github/workflows-disabled/cli-consistency-checker.lock.yml, .github/workflows/cli-consistency-checker.md, .github/workflows-disabled/cli-consistency-checker.md, .github/workflows/codeql.yml, .github/workflows-disabled/codeql.yml, .github/workflows/daily-doc-updater.lock.yml, .github/workflows-disabled/daily-doc-updater.lock.yml, .github/workflows/daily-doc-updater.md, .github/workflows-disabled/daily-doc-updater.md, .github/workflows/daily-test-improver.lock.yml, .github/workflows-disabled/daily-test-improver.lock.yml, .github/workflows/daily-test-improver.md, .github/workflows-disabled/daily-test-improver.md, .github/workflows/devcontainer-feature-publish.yml, .github/workflows-disabled/devcontainer-feature-publish.yml, .github/workflows/devcontainer-feature-test.yml, .github/workflows-disabled/devcontainer-feature-test.yml, .github/workflows/docs-sync.lock.yml, .github/workflows-disabled/docs-sync.lock.yml, .github/workflows/docs-sync.md, .github/workflows-disabled/docs-sync.md, .github/workflows/docs.yml, .github/workflows-disabled/docs.yml, .github/workflows/merge-gate.yml, .github/workflows-disabled/merge-gate.yml, .github/workflows/notice-drift.yml, .github/workflows-disabled/notice-drift.yml, .github/workflows/pr-review-panel.lock.yml, .github/workflows-disabled/pr-review-panel.lock.yml, .github/workflows/pr-review-panel.md, .github/workflows-disabled/pr-review-panel.md, .github/workflows/project-sync.yml, .github/workflows-disabled/project-sync.yml, .github/workflows/triage-panel.lock.yml, .github/workflows-disabled/triage-panel.lock.yml, .github/workflows/triage-panel.md, .github/workflows-disabled/triage-panel.md, .github/workflows/verify-shared-apm-matrix.yml, .github/workflows-disabled/verify-shared-apm-matrix.yml). Add them to the allowed-files configuration field or set protected-files: fallback-to-issue to create a review issue instead.

⚙️ Configure protected-files: fallback-to-issue

```yaml
safe-outputs:
push-to-pull-request-branch:
protected-files: fallback-to-issue
```

### Action Required

**Assign this issue to an agent** to debug and fix the issue.

Debug with any coding agent

Use this prompt with any coding agent (GitHub Copilot, Claude, Gemini, etc.):

````
Debug the agentic workflow failure using https://raw.githubusercontent.com/github/gh-aw/main/debug.md

The failed workflow run is at https://github.com/githubnext/apm/actions/runs/26247218124
````

Manually invoke the agent

Debug this workflow failure using your favorite Agent CLI and the `agentic-workflows` prompt.

- Start your agent
- Load the `agentic-workflows` prompt from `.github/agents/agentic-workflows.agent.md` or
- Type `debug the agentic workflow crane failure in https://github.com/githubnext/apm/actions/runs/26247218124`

> [!TIP]
>
> Stop reporting this workflow as a failure
>
> To stop a workflow from creating failure issues, set `report-failure-as-issue: false` in its frontmatter:
> ```yaml
> safe-outputs:
> report-failure-as-issue: false
> ```
>
>

> Generated from [Crane](https://github.com/githubnext/apm/actions/runs/26247218124) · ● 22.2M · [◷](https://github.com/search?q=repo%3Agithubnext%2Fapm+is%3Aissue+%22gh-aw-workflow-id%3A+crane%22&type=issues)
> - [x] expires on May 28, 2026, 7:14 PM UTC

阅读 .github/agents/agentic-workflows.agent.md 和链接的 gh-aw 调试指南，然后检查 https://github.com/githubnext/apm/actions/runs/26247218124 上的 Crane 运行。确定 protected-files 配置应允许列出的工作流文件，还是使用 fallback-to-issue，并验证 Crane 工作流不再失败。

由索引模型根据 Issue 内容生成。