prompt: We are currently solving the following issue within our repository. Here is the issue text:
  --- BEGIN ISSUE ---
  CKV_GIT_3 should not be triggered on archived repositories
  **Describe the issue**
  _CKV_GIT_3_ currently gets triggered also on archived GitHub repositories. When archiving a repository the configuration `vulnerability_alerts` will get changed to `false` automatically. It's also not possible to turn it on again on an archived repository. _CKV_GIT_3_ should be changed to ignore archived repositories.
  
  **Examples**
  
  ```terraform
  resource "github_repository" "test" {
    name                 = "test"
    visibility           = "private"
    archived             = true
    vulnerability_alerts = false
  }
  ```
  
  **Version (please complete the following information):**
   - Starting with Checkov Version 2.0.764
  
  **Additional context**
  See the [GitHub documentation](https://docs.github.com/en/code-security/supply-chain-security/managing-vulnerabilities-in-your-projects-dependencies/configuring-dependabot-security-updates#supported-repositories) that Dependabot is only supported on non-archived repositories.
  
  
  --- END ISSUE ---
  
  Below are some code segments, each from a relevant file. One or more of these files may contain bugs.
  --- BEGIN FILES ---
  Path: `checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py`
  Content:
  ```
  1 from typing import Any
  2 
  3 from checkov.common.models.enums import CheckCategories, CheckResult
  4 from checkov.terraform.checks.resource.base_resource_value_check import BaseResourceCheck
  5 
  6 
  7 class GithubRepositoryVulnerabilityAlerts(BaseResourceCheck):
  8     def __init__(self) -> None:
  9         name = "Ensure GitHub repository has vulnerability alerts enabled"
  10         id = "CKV_GIT_3"
  11         supported_resources = ["github_repository"]
  12         categories = [CheckCategories.GENERAL_SECURITY]
  13         super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)
  14 
  15     def scan_resource_conf(self, conf) -> CheckResult:
  16         # GitHub enables the alerts on public repos but disables them on private repos by default.
  17         # is private repo
  18         if conf.get("private") == [True] or conf.get("visibility") in [["private"], ["internal"]]:
  19             if conf.get("vulnerability_alerts"):
  20                 return CheckResult.PASSED
  21             return CheckResult.FAILED
  22         # is public repo
  23         if conf.get("vulnerability_alerts") == [False]:
  24             return CheckResult.FAILED
  25         return CheckResult.PASSED
  26 
  27 
  28 check = GithubRepositoryVulnerabilityAlerts()
  29
  ```
  --- END FILES ---
  
  Please first localize the bug based on the issue statement, and then generate a patch according to the `git diff` format fenced by three backticks.
  
  Here is an example:
  
  ```diff
  diff --git a/examples/server_async.py b/examples/server_async.py
  --- a/examples/server_async.py
  +++ b/examples/server_async.py
  @@ -313,4 +313,4 @@
   
   
   if __name__ == "__main__":
  -    asyncio.run(run_async_server("."), debug=True)
  +    asyncio.run(run_async_server(), debug=True)
  diff --git a/examples/server_sync.py b/examples/server_sync.py
  --- a/examples/server_sync.py
  +++ b/examples/server_sync.py
  @@ -313,5 +313,5 @@
   
   
   if __name__ == "__main__":
  -    server = run_sync_server(".")
  +    server = run_sync_server()
       server.shutdown()
  
  ```
  
golden_diff: diff --git a/checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py b/checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py
  --- a/checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py
  +++ b/checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py
  @@ -13,6 +13,9 @@
           super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)
   
       def scan_resource_conf(self, conf) -> CheckResult:
  +        # GitHub disables the alerts when archiving the repository without an option to turn them on again.
  +        if conf.get("archived") == [True]:
  +            return CheckResult.PASSED
           # GitHub enables the alerts on public repos but disables them on private repos by default.
           # is private repo
           if conf.get("private") == [True] or conf.get("visibility") in [["private"], ["internal"]]:
  
verification_info: {"golden_diff": "diff --git a/checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py b/checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py\n--- a/checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py\n+++ b/checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py\n@@ -13,6 +13,9 @@\n         super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)\n \n     def scan_resource_conf(self, conf) -> CheckResult:\n+        # GitHub disables the alerts when archiving the repository without an option to turn them on again.\n+        if conf.get(\"archived\") == [True]:\n+            return CheckResult.PASSED\n         # GitHub enables the alerts on public repos but disables them on private repos by default.\n         # is private repo\n         if conf.get(\"private\") == [True] or conf.get(\"visibility\") in [[\"private\"], [\"internal\"]]:\n", "issue": "CKV_GIT_3 should not be triggered on archived repositories\n**Describe the issue**\r\n_CKV_GIT_3_ currently gets triggered also on archived GitHub repositories. When archiving a repository the configuration `vulnerability_alerts` will get changed to `false` automatically. It's also not possible to turn it on again on an archived repository. _CKV_GIT_3_ should be changed to ignore archived repositories.\r\n\r\n**Examples**\r\n\r\n```terraform\r\nresource \"github_repository\" \"test\" {\r\n  name                 = \"test\"\r\n  visibility           = \"private\"\r\n  archived             = true\r\n  vulnerability_alerts = false\r\n}\r\n```\r\n\r\n**Version (please complete the following information):**\r\n - Starting with Checkov Version 2.0.764\r\n\r\n**Additional context**\r\nSee the [GitHub documentation](https://docs.github.com/en/code-security/supply-chain-security/managing-vulnerabilities-in-your-projects-dependencies/configuring-dependabot-security-updates#supported-repositories) that Dependabot is only supported on non-archived repositories.\r\n\n", "before_files": [{"content": "from typing import Any\n\nfrom checkov.common.models.enums import CheckCategories, CheckResult\nfrom checkov.terraform.checks.resource.base_resource_value_check import BaseResourceCheck\n\n\nclass GithubRepositoryVulnerabilityAlerts(BaseResourceCheck):\n    def __init__(self) -> None:\n        name = \"Ensure GitHub repository has vulnerability alerts enabled\"\n        id = \"CKV_GIT_3\"\n        supported_resources = [\"github_repository\"]\n        categories = [CheckCategories.GENERAL_SECURITY]\n        super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)\n\n    def scan_resource_conf(self, conf) -> CheckResult:\n        # GitHub enables the alerts on public repos but disables them on private repos by default.\n        # is private repo\n        if conf.get(\"private\") == [True] or conf.get(\"visibility\") in [[\"private\"], [\"internal\"]]:\n            if conf.get(\"vulnerability_alerts\"):\n                return CheckResult.PASSED\n            return CheckResult.FAILED\n        # is public repo\n        if conf.get(\"vulnerability_alerts\") == [False]:\n            return CheckResult.FAILED\n        return CheckResult.PASSED\n\n\ncheck = GithubRepositoryVulnerabilityAlerts()\n", "path": "checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py"}], "after_files": [{"content": "from typing import Any\n\nfrom checkov.common.models.enums import CheckCategories, CheckResult\nfrom checkov.terraform.checks.resource.base_resource_value_check import BaseResourceCheck\n\n\nclass GithubRepositoryVulnerabilityAlerts(BaseResourceCheck):\n    def __init__(self) -> None:\n        name = \"Ensure GitHub repository has vulnerability alerts enabled\"\n        id = \"CKV_GIT_3\"\n        supported_resources = [\"github_repository\"]\n        categories = [CheckCategories.GENERAL_SECURITY]\n        super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)\n\n    def scan_resource_conf(self, conf) -> CheckResult:\n        # GitHub disables the alerts when archiving the repository without an option to turn them on again.\n        if conf.get(\"archived\") == [True]:\n            return CheckResult.PASSED\n        # GitHub enables the alerts on public repos but disables them on private repos by default.\n        # is private repo\n        if conf.get(\"private\") == [True] or conf.get(\"visibility\") in [[\"private\"], [\"internal\"]]:\n            if conf.get(\"vulnerability_alerts\"):\n                return CheckResult.PASSED\n            return CheckResult.FAILED\n        # is public repo\n        if conf.get(\"vulnerability_alerts\") == [False]:\n            return CheckResult.FAILED\n        return CheckResult.PASSED\n\n\ncheck = GithubRepositoryVulnerabilityAlerts()\n", "path": "checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py"}]}