CKV_GIT_3 needs to be refactored to support new github_repository_vulnerability_alerts resource

[fatbasstard]

Describe the issue
The CKV_GIT_3 (Ensure GitHub repository has vulnerability alerts enabled) checks on the vulnerability_alerts setting of the github_repository resource.

But since Provider version 6.12 this attribute is obsolete and replaced with a new resource (See integrations/terraform-provider-github#3166)

This check does not support this setup yet

Additional context

Links:

• https://github.com/bridgecrewio/checkov/blob/main/checkov/terraform/checks/resource/github/RepositoryEnableVulnerabilityAlerts.py
• [FEAT] Add new resource for repository vulnerability alerts integrations/terraform-provider-github#3166

[omobolajiadeyan]

I am working on this. I will migrate CKV_GIT_3 to a graph-aware policy so it preserves the existing archived/public/private behavior while accepting an enabled github_repository_vulnerability_alerts resource connected to the repository. I will include parser-backed fixtures for both legacy and provider 6.12+ configurations.