A financial services company deploys web workloads to Azure App Service using CI/CD pipelines hosted in both GitHub and Azure DevOps. Security architects want a single view in Microsoft Defender for Cloud that correlates code-level findings (exposed secrets, insecure IaC templates, vulnerable dependencies) with the runtime cloud resources those pipelines deploy, so they can prioritize fixing the source of misconfigurations rather than only the deployed resources. Which Defender for Cloud capability should they implement to meet this requirement?