Compliance controls should auto-update on scan completion instead of 12-hour intervals

Problem

Compliance controls currently update on a 12-hour interval schedule. This creates a delay between when security scans complete and when compliance status is reflected in the compliance framework, leading to:

  • Stale compliance data that doesn't reflect current project state
  • Confusion when scans complete successfully but compliance status shows as failing
  • Need for manual workarounds (unassigning/reassigning frameworks) to trigger updates

Proposal

Update compliance controls automatically when security scans complete, rather than waiting for the scheduled 12-hour interval. This would provide:

  • Real-time compliance status updates
  • Immediate feedback when security scans complete
  • Reduced confusion about compliance state
  • Elimination of manual workaround needs

Current Workaround

Users can manually trigger a compliance scan by unassigning and reassigning the compliance framework (takes ~5 minutes to run).

Related Issues

  • #579849 (closed) - Compliance controls should show success/failed based on scan completion regardless of pipeline status

Benefits

  • More accurate, real-time compliance reporting
  • Better user experience with immediate feedback
  • Reduced support burden from compliance status confusion
  • Alignment with user expectations for modern CI/CD systems
Edited by 🤖 GitLab Bot 🤖