Right now the data of GitHub code-scanning-alerts does not allow to filter alerts based on the repository metadata. (e.g. only get alerts for non-archived repos) The repository metadata is present for most of the other kinds (e.g repository, file, dependabot-alert) but not for code-scanning-alerts.