[SPIKE] Investigate reporting of near-real-time metrics to interface

As a follow up to Spike: Investigate options for searching vulner... (#352665 - closed) • Gregory Havenga (is on PTO from 15 December 2025 to 02 January 2026) • 15.9, a possible strategy for providing near-real-time analytics and metrics for our users without increasing load on our servers through polling or encouraging user refresh behaviour is to increase our utilisation of WebSocket technology to broadcast these changes to users who are currently watching the interface for this information.

GitLab already utilised WebSockets to provide the connection channel for our GraphQL queries to improve communication performance, so all the necessary frameworks should already be established to enable us to begin to asynchronously calculate information in the backend outside of the standard request-response cycle, and then broadcast this to users subscribed to the appropriate channels, allowing their interfaces to update without prompting.

Expected Outcomes

  1. Test the implementation of a Vulnerability Report actioncable channel and subscription.
  2. Experiment with the transmitting of new metric information to the interface.
  3. Determine the complexity of automatically updating report elements.

Timebox: 2 Days