Convert lettered clause lists to ordered HTML lists

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Author: coadaflorin

LICENSE.md

@@ -19,133 +19,149 @@ This GitHub AI Scan License (the **"License"**) governs the limited right to dow
 
 ## 2. **LICENSE GRANT**
 
-### 1. **Grant.** Subject to the Agreement and the License, GitHub grants Customer a limited, non-exclusive, non-transferable, non-sublicensable, revocable license during the period of Authorized Access to:
+### 2.1. **Grant.** Subject to the Agreement and the License, GitHub grants Customer a limited, non-exclusive, non-transferable, non-sublicensable, revocable license during the period of Authorized Access to:
 
-- (a) permit an approved GitHub Actions workflow associated with an Authorized Codebase to download the unmodified Runtime from the GitHub-designated distribution location;
-- (b) make temporary or cached copies of the Runtime that are technically required to execute the workflow;
-- (c) execute the unmodified Runtime on an Approved Runner;
-- (d) invoke the Runtime only through an Approved Invocation;
-- (e) use the Runtime only to scan Authorized Codebases; and
-- (f) receive and use security findings generated by AI Scan for the Customer's internal security purposes.
+<ol type="a">
+<li>permit an approved GitHub Actions workflow associated with an Authorized Codebase to download the unmodified Runtime from the GitHub-designated distribution location;</li>
+<li>make temporary or cached copies of the Runtime that are technically required to execute the workflow;</li>
+<li>execute the unmodified Runtime on an Approved Runner;</li>
+<li>invoke the Runtime only through an Approved Invocation;</li>
+<li>use the Runtime only to scan Authorized Codebases; and</li>
+<li>receive and use security findings generated by AI Scan for the Customer's internal security purposes.</li>
+</ol>
 
-### 1. **Automated Copying and Execution.** The license in Section 2.1 expressly permits the automated download, caching, and execution of the Runtime that occurs when a GitHub Actions workflow runs AI Scan on an Approved Runner.
+### 2.2. **Automated Copying and Execution.** The license in Section 2.1 expressly permits the automated download, caching, and execution of the Runtime that occurs when a GitHub Actions workflow runs AI Scan on an Approved Runner.
 
-### 2. **License Conditions.** The license is conditioned on and continues only while the Customer maintains:
+### 2.3. **License Conditions.** The license is conditioned on and continues only while the Customer maintains:
 
-- (a) a valid Agreement;
-- (b) Authorized Access;
-- (c) applicable enterprise, organization, and repository enablement of AI Scan;
-- (d) payment of applicable AI consumption charges;
-- (e) compliance with the Customer's model policies and GitHub's approved-model list; and
-- (f) compliance with GitHub's Acceptable Use Policies and applicable law.
+<ol type="a">
+<li>a valid Agreement;</li>
+<li>Authorized Access;</li>
+<li>applicable enterprise, organization, and repository enablement of AI Scan;</li>
+<li>payment of applicable AI consumption charges;</li>
+<li>compliance with the Customer's model policies and GitHub's approved-model list; and</li>
+<li>compliance with GitHub's Acceptable Use Policies and applicable law.</li>
+</ol>
 
-### 1. **No Source or Internal Materials.** No rights are granted to source code, system prompts, scanning logic, build instructions, tests, evaluation materials, model weights, query logic, or other internal materials of GitHub.
+### 2.4. **No Source or Internal Materials.** No rights are granted to source code, system prompts, scanning logic, build instructions, tests, evaluation materials, model weights, query logic, or other internal materials of GitHub.
 
-## 1. **RESTRICTIONS**
+## 3. **RESTRICTIONS**
 
-### 1. **Restrictions.** Except to the extent required by mandatory law or by an applicable third-party license, Customer must not, and must not allow any third party to:
+### 3.1. **Restrictions.** Except to the extent required by mandatory law or by an applicable third-party license, Customer must not, and must not allow any third party to:
 
-- (a) directly invoke or operate the Runtime outside an Approved Invocation;
-- (b) modify, adapt, translate, or create derivative works from the Runtime;
-- (c) reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code, prompts, or internal operation of the Runtime;
-- (d) redistribute, publish, transfer, lend, or sublicense the Runtime;
-- (e) sell, lease, or commercially exploit the Runtime;
-- (f) offer the Runtime as a standalone or integrated product or hosted scanning service;
-- (g) use the Runtime to provide scanning services to third parties;
-- (h) bypass authentication, entitlement checks, model policies, consumption meters, technical restrictions, or usage limits;
-- (i) remove or alter copyright, trademark, attribution, or proprietary notices;
-- (j) scan a repository or codebase that Customer is not authorized to test;
-- (k) use the Runtime in violation of law, applicable sanctions, export controls, or the Agreement; or
-- (l) use a copied or cached Runtime after Authorized Access ends, except as necessary for ordinary automated technical cleanup.
+<ol type="a">
+<li>directly invoke or operate the Runtime outside an Approved Invocation;</li>
+<li>modify, adapt, translate, or create derivative works from the Runtime;</li>
+<li>reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code, prompts, or internal operation of the Runtime;</li>
+<li>redistribute, publish, transfer, lend, or sublicense the Runtime;</li>
+<li>sell, lease, or commercially exploit the Runtime;</li>
+<li>offer the Runtime as a standalone or integrated product or hosted scanning service;</li>
+<li>use the Runtime to provide scanning services to third parties;</li>
+<li>bypass authentication, entitlement checks, model policies, consumption meters, technical restrictions, or usage limits;</li>
+<li>remove or alter copyright, trademark, attribution, or proprietary notices;</li>
+<li>scan a repository or codebase that Customer is not authorized to test;</li>
+<li>use the Runtime in violation of law, applicable sanctions, export controls, or the Agreement; or</li>
+<li>use a copied or cached Runtime after Authorized Access ends, except as necessary for ordinary automated technical cleanup.</li>
+</ol>
 
-### 1. **Mandatory-Law Exception.** The restrictions in Section 3.1(c) do not apply to the extent applicable law grants Customer non-waivable rights to reverse engineer for interoperability or similar purposes.
+### 3.2. **Mandatory-Law Exception.** The restrictions in Section 3.1(c) do not apply to the extent applicable law grants Customer non-waivable rights to reverse engineer for interoperability or similar purposes.
 
-## 1. **PUBLIC REPOSITORY; UNAUTHORIZED DOWNLOADS**
+## 4. **PUBLIC REPOSITORY; UNAUTHORIZED DOWNLOADS**
 
-### 1. **Distribution Mechanism Only.** GitHub may host the Runtime in a publicly accessible repository solely so that GitHub Actions workflows can download and execute it. Public accessibility is a distribution mechanism only.
+### 4.1. **Distribution Mechanism Only.** GitHub may host the Runtime in a publicly accessible repository solely so that GitHub Actions workflows can download and execute it. Public accessibility is a distribution mechanism only.
 
-### 2. **No Open Source; No Implied Grant.** Public availability of the Runtime:
+### 4.2. **No Open Source; No Implied Grant.** Public availability of the Runtime:
 
-- (a) does not make the Runtime open-source software;
-- (b) does not grant any person access to AI Scan or GitHub's AI services;
-- (c) does not grant any license to any person who does not have Authorized Access;
-- (d) does not create any entitlement based on mere possession of a copy; and
-- (e) does not limit GitHub's right to authenticate, authorize, meter, throttle, disable, or reject use of the Runtime or the AI service.
+<ol type="a">
+<li>does not make the Runtime open-source software;</li>
+<li>does not grant any person access to AI Scan or GitHub's AI services;</li>
+<li>does not grant any license to any person who does not have Authorized Access;</li>
+<li>does not create any entitlement based on mere possession of a copy; and</li>
+<li>does not limit GitHub's right to authenticate, authorize, meter, throttle, disable, or reject use of the Runtime or the AI service.</li>
+</ol>
+
+### 4.3. **Access Controls.** Access to AI Scan services remains subject to authentication, product entitlement, customer model policy, and consumption controls. GitHub may technically block or reject unauthorized use.
 
-### 1. **Access Controls.** Access to AI Scan services remains subject to authentication, product entitlement, customer model policy, and consumption controls. GitHub may technically block or reject unauthorized use.
+## 5. **THIRD-PARTY SOFTWARE**
 
-## 1. **THIRD-PARTY SOFTWARE**
+### 5.1. **Third-Party Components.** The Runtime may include third-party or open-source components governed by their own license terms. Applicable notices are provided with the Runtime.
 
-### 1. **Third-Party Components.** The Runtime may include third-party or open-source components governed by their own license terms. Applicable notices are provided with the Runtime.
+### 5.2. **Precedence for Third-Party Components.** This License does not restrict rights granted to Customer directly under an applicable open-source or third-party license. If a third-party license conflicts with this License for a specific component, the third-party license controls for that component.
 
-### 2. **Precedence for Third-Party Components.** This License does not restrict rights granted to Customer directly under an applicable open-source or third-party license. If a third-party license conflicts with this License for a specific component, the third-party license controls for that component.
+## 6. **AI SERVICES AND CUSTOMER DATA**
 
-## 2. **AI SERVICES AND CUSTOMER DATA**
+### 6.1. **AI Services.** The Runtime invokes GitHub-hosted AI and related services. This License does not independently grant access to those services. Use of the services is governed by the Agreement and the applicable product, generative-AI, privacy, and data-protection terms.
 
-### 3. **AI Services.** The Runtime invokes GitHub-hosted AI and related services. This License does not independently grant access to those services. Use of the services is governed by the Agreement and the applicable product, generative-AI, privacy, and data-protection terms.
+### 6.2. **Models and Findings.** Model availability is subject to GitHub support and Customer model policies. Security findings may be AI-generated. Product documentation describes relevant processing, retention, and controls.
 
-### 4. **Models and Findings.** Model availability is subject to GitHub support and Customer model policies. Security findings may be AI-generated. Product documentation describes relevant processing, retention, and controls.
+## 7. **SEPARATELY LICENSED GITHUB PRODUCTS; CODEQL**
 
-## 3. **SEPARATELY LICENSED GITHUB PRODUCTS; CODEQL**
+### 7.1. **Separately Licensed Products.** GitHub products, services, or components that are separately licensed remain subject to their own terms. This License does not grant rights to any such product, service, or component.
 
-### 5. **Separately Licensed Products.** GitHub products, services, or components that are separately licensed remain subject to their own terms. This License does not grant rights to any such product, service, or component.
+## 8. **OWNERSHIP**
 
-## 4. **OWNERSHIP**
+### 8.1. **Ownership.** GitHub and its licensors retain all right, title, and interest in and to the Runtime. The Runtime is licensed, not sold.
 
-### 6. **Ownership.** GitHub and its licensors retain all right, title, and interest in and to the Runtime. The Runtime is licensed, not sold.
+### 8.2. **No Implied Licenses.** No licenses are granted by implication, estoppel, or otherwise. GitHub reserves all rights not expressly granted. No source-code rights and no trademark or branding rights are granted.
 
-### 7. **No Implied Licenses.** No licenses are granted by implication, estoppel, or otherwise. GitHub reserves all rights not expressly granted. No source-code rights and no trademark or branding rights are granted.
+### 8.3. **Customer Content.** Customer retains its rights in its code and other content, subject to the Agreement.
 
-### 8. **Customer Content.** Customer retains its rights in its code and other content, subject to the Agreement.
+## 9. **UPDATES AND TECHNICAL OPERATION**
 
-## 5. **UPDATES AND TECHNICAL OPERATION**
+### 9.1. **Updates.** GitHub may issue automatic or required Runtime updates, and may replace, deprecate, or discontinue Runtime versions.
 
-### 9. **Updates.** GitHub may issue automatic or required Runtime updates, and may replace, deprecate, or discontinue Runtime versions.
+### 9.2. **Integrity.** GitHub may use checksums, signatures, or other integrity controls. Customer must not circumvent them.
 
-### 10. **Integrity.** GitHub may use checksums, signatures, or other integrity controls. Customer must not circumvent them.
+### 9.3. **Caching and Cleanup.** GitHub Actions may temporarily cache the Runtime. GitHub may remove or invalidate obsolete versions. Direct local use of the Runtime is not supported.
 
-### 11. **Caching and Cleanup.** GitHub Actions may temporarily cache the Runtime. GitHub may remove or invalidate obsolete versions. Direct local use of the Runtime is not supported.
+### 9.4. **No Compatibility Promise.** GitHub does not promise backward compatibility, a fixed model, continued availability of any version, or any specific feature except as required by the Agreement.
 
-### 12. **No Compatibility Promise.** GitHub does not promise backward compatibility, a fixed model, continued availability of any version, or any specific feature except as required by the Agreement.
+## 10. **TERM AND TERMINATION**
 
-## 6. **TERM AND TERMINATION**
+### 10.1. **Term.** This License is effective on the Effective Date and continues only while the Customer has Authorized Access.
 
-### 13. **Term.** This License is effective on the Effective Date and continues only while the Customer has Authorized Access.
+### 10.2. **Termination.** This License terminates automatically when Authorized Access ends and may be terminated by GitHub for breach or as permitted by the Agreement.
 
-### 14. **Termination.** This License terminates automatically when Authorized Access ends and may be terminated by GitHub for breach or as permitted by the Agreement.
+### 10.3. **Effect of Termination.** On termination or expiration:
 
-### 15. **Effect of Termination.** On termination or expiration:
+<ol type="a">
+<li>Customer must stop using the Runtime;</li>
+<li>all rights granted under this License end;</li>
+<li>Customer must delete copies of the Runtime under its control, subject to ordinary automated backup and cache-cleanup processes;</li>
+<li>GitHub may disable access to the AI service; and</li>
+<li>accrued payment obligations and Sections 3, 4, 5, 7, 8, 10.3, 11, and 12 survive.</li>
+</ol>
 
-- (a) Customer must stop using the Runtime;
-- (b) all rights granted under this License end;
-- (c) Customer must delete copies of the Runtime under its control, subject to ordinary automated backup and cache-cleanup processes;
-- (d) GitHub may disable access to the AI service; and
-- (e) accrued payment obligations and Sections 3, 4, 5, 7, 8, 10.3, 11, and 12 survive.
+### 10.4. **Public Availability After Termination.** The Runtime may remain technically downloadable from the public repository after termination. Continued public availability does not extend or revive any license.
 
-### 1. **Public Availability After Termination.** The Runtime may remain technically downloadable from the public repository after termination. Continued public availability does not extend or revive any license.
+## 11. **WARRANTIES, LIABILITY, AND AGREEMENT HIERARCHY**
 
-## 1. **WARRANTIES, LIABILITY, AND AGREEMENT HIERARCHY**
+### 11.1. **Agreement Controls.** Warranty disclaimers, liability limitations, indemnities, governing-law, dispute-resolution, export, and trade-compliance obligations are governed by the Agreement and incorporated by reference. Support and service levels are governed by the Agreement and applicable product documentation.
 
-### 1. **Agreement Controls.** Warranty disclaimers, liability limitations, indemnities, governing-law, dispute-resolution, export, and trade-compliance obligations are governed by the Agreement and incorporated by reference. Support and service levels are governed by the Agreement and applicable product documentation.
+### 11.2. **AI Output Disclaimer.** AI Scan findings may be inaccurate, incomplete, or fail to identify vulnerabilities. AI Scan supplements and does not replace Customer's own security testing, secure-development practices, and code review.
 
-### 2. **AI Output Disclaimer.** AI Scan findings may be inaccurate, incomplete, or fail to identify vulnerabilities. AI Scan supplements and does not replace Customer's own security testing, secure-development practices, and code review.
+### 11.3. **Mandatory Law.** Nothing in this License limits rights or remedies that cannot be limited under applicable mandatory law.
 
-### 3. **Mandatory Law.** Nothing in this License limits rights or remedies that cannot be limited under applicable mandatory law.
+### 11.4. **Fallback Standalone Terms.** If no Agreement supplies governing law, this License is governed by the laws of the State of California, excluding conflicts-of-law rules, with exclusive venue in the state and federal courts located in San Francisco County, California. [VERIFY]
 
-### 4. **Fallback Standalone Terms.** If no Agreement supplies governing law, this License is governed by the laws of the State of California, excluding conflicts-of-law rules, with exclusive venue in the state and federal courts located in San Francisco County, California. [VERIFY]
+## 12. **ACCEPTANCE AND INCORPORATION**
 
-## 2. **ACCEPTANCE AND INCORPORATION**
+### 12.1. **Acceptance.** This License is accepted by the earliest of:
 
-### 5. **Acceptance.** This License is accepted by the earliest of: (a) the Customer's execution or acceptance of an Agreement that incorporates this License by reference; (b) the Customer's acceptance of a preview invitation that incorporates this License; or (c) the Customer's download, installation, or execution of the Runtime.
+<ol type="a">
+<li>the Customer's execution or acceptance of an Agreement that incorporates this License by reference;</li>
+<li>the Customer's acceptance of a preview invitation that incorporates this License; or</li>
+<li>the Customer's download, installation, or execution of the Runtime.</li>
+</ol>
 
-## 3. **GENERAL**
+## 13. **GENERAL**
 
-### 6. **Notices.** Notices are given as provided in the Agreement.
+### 13.1. **Notices.** Notices are given as provided in the Agreement.
 
-### 7. **Assignment.** Customer must not assign License except as permitted by the Agreement. GitHub may assign to an affiliate or successor.
+### 13.2. **Assignment.** Customer must not assign License except as permitted by the Agreement. GitHub may assign to an affiliate or successor.
 
-### 8. **Entire Agreement; Amendments.** Together with the Agreement and referenced documents, this License is the entire agreement regarding the Runtime. Amendments are governed by the Agreement.
+### 13.3. **Entire Agreement; Amendments.** Together with the Agreement and referenced documents, this License is the entire agreement regarding the Runtime. Amendments are governed by the Agreement.
 
-### 9. **Severability.** If a provision is unenforceable, the remainder remains in effect.
+### 13.4. **Severability.** If a provision is unenforceable, the remainder remains in effect.
 
-### 10. **Counterparts; Electronic Signatures.** This License may be accepted electronically and in counterparts.
+### 13.5. **Counterparts; Electronic Signatures.** This License may be accepted electronically and in counterparts.