Add operational report message to vulnerability report

ee/app/assets/javascripts/security_dashboard/components/shared/vulnerability_report/vulnerability_report_tabs.vue

 <script>
-import { GlTabs, GlTab } from '@gitlab/ui';
+import { GlTabs, GlTab, GlCard } from '@gitlab/ui';
 import { s__ } from '~/locale';
 import SurveyRequestBanner from '../survey_request_banner.vue';
 import VulnerabilityReportHeader from './vulnerability_report_header.vue';
@@ -10,6 +10,7 @@ export default {
   components: {
     GlTabs,
     GlTab,
+    GlCard,
     SurveyRequestBanner,
     VulnerabilityReportHeader,
     VulnerabilityReport,
@@ -29,6 +30,9 @@ export default {
     operationalTabParameter: REPORT_TAB.OPERATIONAL.toLowerCase(),
     developmentTab: s__('SecurityReports|Development vulnerabilities'),
     operationalTab: s__('SecurityReports|Operational vulnerabilities'),
+    operationalTabMessage: s__(
+      'SecurityReports|These vulnerabilities were detected in external sources. They are not necessarily tied to your GitLab project. For example, running containers, URLs, and so on.',
+    ),
   },
   REPORT_TAB,
 };
@@ -40,7 +44,7 @@ export default {
 
     <vulnerability-report-header />
 
-    <gl-tabs class="gl-mt-5" sync-active-tab-with-query-params>
+    <gl-tabs class="gl-mt-5" content-class="gl-pt-0" sync-active-tab-with-query-params>
       <gl-tab :title="$options.i18n.developmentTab" lazy>
         <vulnerability-report
           :type="$options.REPORT_TAB.DEVELOPMENT"
@@ -54,6 +58,8 @@ export default {
         :query-param-value="$options.i18n.operationalTabParameter"
         lazy
       >
+        <gl-card body-class="gl-p-6">{{ $options.i18n.operationalTabMessage }}</gl-card>
+
         <vulnerability-report
           :type="$options.REPORT_TAB.OPERATIONAL"
           :query="query"

locale/gitlab.pot

@@ -31250,6 +31250,9 @@ msgstr ""
 msgid "SecurityReports|There was an error while generating the report."
 msgstr ""
 
+msgid "SecurityReports|These vulnerabilities were detected in external sources. They are not necessarily tied to your GitLab project. For example, running containers, URLs, and so on."
+msgstr ""
+
 msgid "SecurityReports|To widen your search, change or remove filters above"
 msgstr ""