Extract a VulnerableProjectsFinder
This MR replaces Group#vulnerable_projects
with Security::VulnerableProjectsFinder
, in anticipation of the vulnerable project fetching logic being reused by the instance security dashboard.
This extraction lays the foundation for #17969 (closed).
Edited by Avielle Wolfe