List all files touched by any commit in the database
Only return "known offenders", which are files that are part of at least one vulnerability fix
OK
A URL-friendly conversion of a filepath to serves a unique identifier.
We use ActiveSupport's parameterize for this, which replaces most non-word characters with hyphens.
For example, for project foo and file mydir/myfile.c, it's foo-mydir-myfile-c
The filepath slug is guaranteed to be globally unique across all VHP data.