Connecting runtime to source: Sysdig and Semgrep integration

This document outlines an integration between Sysdig (Falco-powered runtime detection) and Semgrep that automates correlation between active runtime vulnerabilities and their exact source code origins via OCI image labels (repository and commit). When Sysdig flags a vulnerable package in production, metadata is used to query Semgrep for the precise file and line plus remediation guidance, creating a unified, actionable finding that reduces manual effort, minimizes alert fatigue, and accelerates MTTR across CI/CD-driven DevSecOps workflows.