We are currently solving the following issue within our repository. Here is the issue text:
--- BEGIN ISSUE ---
CKV_GIT_3 should not be triggered on archived repositories
**Describe the issue**
_CKV_GIT_3_ currently gets triggered also on archived GitHub repositories. When archiving a repository the configuration `vulnerability_alerts` will get changed to `false` automatically. It's also not possible to turn it on again on an archived repository. _CKV_GIT_3_ should be changed to ignore archived repositories.

**Examples**

```terraform
resource "github_repository" "test" {
  name                 = "test"
  visibility           = "private"
  archived             = true
  vulnerability_alerts = false
}
```

**Version (please complete the following information):**
 - Starting with Checkov Version 2.0.764

**Additional context**
See the [GitHub documentation](https://docs.github.com/en/code-security/supply-chain-security/managing-vulnerabilities-in-your-projects-dependencies/configuring-dependabot-security-updates#supported-repositories) that Dependabot is only supported on non-archived repositories.


--- END ISSUE ---

Below are some code segments, each from a relevant file. One or more of these files may contain bugs.
--- BEGIN FILES ---
Path: `checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py`
Content:
```
1 from typing import Any
2 
3 from checkov.common.models.enums import CheckCategories, CheckResult
4 from checkov.terraform.checks.resource.base_resource_value_check import BaseResourceCheck
5 
6 
7 class GithubRepositoryVulnerabilityAlerts(BaseResourceCheck):
8     def __init__(self) -> None:
9         name = "Ensure GitHub repository has vulnerability alerts enabled"
10         id = "CKV_GIT_3"
11         supported_resources = ["github_repository"]
12         categories = [CheckCategories.GENERAL_SECURITY]
13         super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)
14 
15     def scan_resource_conf(self, conf) -> CheckResult:
16         # GitHub enables the alerts on public repos but disables them on private repos by default.
17         # is private repo
18         if conf.get("private") == [True] or conf.get("visibility") in [["private"], ["internal"]]:
19             if conf.get("vulnerability_alerts"):
20                 return CheckResult.PASSED
21             return CheckResult.FAILED
22         # is public repo
23         if conf.get("vulnerability_alerts") == [False]:
24             return CheckResult.FAILED
25         return CheckResult.PASSED
26 
27 
28 check = GithubRepositoryVulnerabilityAlerts()
29
```
--- END FILES ---

Please first localize the bug based on the issue statement, and then generate a patch according to the `git diff` format fenced by three backticks.

Here is an example:

```diff
diff --git a/examples/server_async.py b/examples/server_async.py
--- a/examples/server_async.py
+++ b/examples/server_async.py
@@ -313,4 +313,4 @@
 
 
 if __name__ == "__main__":
-    asyncio.run(run_async_server("."), debug=True)
+    asyncio.run(run_async_server(), debug=True)
diff --git a/examples/server_sync.py b/examples/server_sync.py
--- a/examples/server_sync.py
+++ b/examples/server_sync.py
@@ -313,5 +313,5 @@
 
 
 if __name__ == "__main__":
-    server = run_sync_server(".")
+    server = run_sync_server()
     server.shutdown()

```

diff --git a/checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py b/checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py
--- a/checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py
+++ b/checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py
@@ -13,6 +13,9 @@
         super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)
 
     def scan_resource_conf(self, conf) -> CheckResult:
+        # GitHub disables the alerts when archiving the repository without an option to turn them on again.
+        if conf.get("archived") == [True]:
+            return CheckResult.PASSED
         # GitHub enables the alerts on public repos but disables them on private repos by default.
         # is private repo
         if conf.get("private") == [True] or conf.get("visibility") in [["private"], ["internal"]]:

{"golden_diff": "diff --git a/checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py b/checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py\n--- a/checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py\n+++ b/checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py\n@@ -13,6 +13,9 @@\n         super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)\n \n     def scan_resource_conf(self, conf) -> CheckResult:\n+        # GitHub disables the alerts when archiving the repository without an option to turn them on again.\n+        if conf.get(\"archived\") == [True]:\n+            return CheckResult.PASSED\n         # GitHub enables the alerts on public repos but disables them on private repos by default.\n         # is private repo\n         if conf.get(\"private\") == [True] or conf.get(\"visibility\") in [[\"private\"], [\"internal\"]]:\n", "issue": "CKV_GIT_3 should not be triggered on archived repositories\n**Describe the issue**\r\n_CKV_GIT_3_ currently gets triggered also on archived GitHub repositories. When archiving a repository the configuration `vulnerability_alerts` will get changed to `false` automatically. It's also not possible to turn it on again on an archived repository. _CKV_GIT_3_ should be changed to ignore archived repositories.\r\n\r\n**Examples**\r\n\r\n```terraform\r\nresource \"github_repository\" \"test\" {\r\n  name                 = \"test\"\r\n  visibility           = \"private\"\r\n  archived             = true\r\n  vulnerability_alerts = false\r\n}\r\n```\r\n\r\n**Version (please complete the following information):**\r\n - Starting with Checkov Version 2.0.764\r\n\r\n**Additional context**\r\nSee the [GitHub documentation](https://docs.github.com/en/code-security/supply-chain-security/managing-vulnerabilities-in-your-projects-dependencies/configuring-dependabot-security-updates#supported-repositories) that Dependabot is only supported on non-archived repositories.\r\n\n", "before_files": [{"content": "from typing import Any\n\nfrom checkov.common.models.enums import CheckCategories, CheckResult\nfrom checkov.terraform.checks.resource.base_resource_value_check import BaseResourceCheck\n\n\nclass GithubRepositoryVulnerabilityAlerts(BaseResourceCheck):\n    def __init__(self) -> None:\n        name = \"Ensure GitHub repository has vulnerability alerts enabled\"\n        id = \"CKV_GIT_3\"\n        supported_resources = [\"github_repository\"]\n        categories = [CheckCategories.GENERAL_SECURITY]\n        super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)\n\n    def scan_resource_conf(self, conf) -> CheckResult:\n        # GitHub enables the alerts on public repos but disables them on private repos by default.\n        # is private repo\n        if conf.get(\"private\") == [True] or conf.get(\"visibility\") in [[\"private\"], [\"internal\"]]:\n            if conf.get(\"vulnerability_alerts\"):\n                return CheckResult.PASSED\n            return CheckResult.FAILED\n        # is public repo\n        if conf.get(\"vulnerability_alerts\") == [False]:\n            return CheckResult.FAILED\n        return CheckResult.PASSED\n\n\ncheck = GithubRepositoryVulnerabilityAlerts()\n", "path": "checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py"}], "after_files": [{"content": "from typing import Any\n\nfrom checkov.common.models.enums import CheckCategories, CheckResult\nfrom checkov.terraform.checks.resource.base_resource_value_check import BaseResourceCheck\n\n\nclass GithubRepositoryVulnerabilityAlerts(BaseResourceCheck):\n    def __init__(self) -> None:\n        name = \"Ensure GitHub repository has vulnerability alerts enabled\"\n        id = \"CKV_GIT_3\"\n        supported_resources = [\"github_repository\"]\n        categories = [CheckCategories.GENERAL_SECURITY]\n        super().__init__(name=name, id=id, categories=categories, supported_resources=supported_resources)\n\n    def scan_resource_conf(self, conf) -> CheckResult:\n        # GitHub disables the alerts when archiving the repository without an option to turn them on again.\n        if conf.get(\"archived\") == [True]:\n            return CheckResult.PASSED\n        # GitHub enables the alerts on public repos but disables them on private repos by default.\n        # is private repo\n        if conf.get(\"private\") == [True] or conf.get(\"visibility\") in [[\"private\"], [\"internal\"]]:\n            if conf.get(\"vulnerability_alerts\"):\n                return CheckResult.PASSED\n            return CheckResult.FAILED\n        # is public repo\n        if conf.get(\"vulnerability_alerts\") == [False]:\n            return CheckResult.FAILED\n        return CheckResult.PASSED\n\n\ncheck = GithubRepositoryVulnerabilityAlerts()\n", "path": "checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py"}]}