External custom controls
### Problem to solve Currently all standards adherence report controls are manually created and use instance/group or project settings https://docs.gitlab.com/ee/user/compliance/compliance_center/#compliance-standards-adherence-dashboard This can impact users that are looking for slight variations or complete new standards checks. For example the GitLab standard current has a check to ensure that MRs have at least two approvals. https://docs.gitlab.com/ee/user/compliance/compliance_center/#gitlab-standard, but users may only require 1 approver. ### Proposal From the [technical exploration](https://gitlab.com/gitlab-org/gitlab/-/issues/451414#note_1868526553) for MVC we build Pull based API approach. This approach is very similar to [MR external status Checks](https://docs.gitlab.com/ee/user/project/merge_requests/status_checks.html). User will need to able to configure an eternal service (URL), including security mechanism such as HMAC. Every 12 hours GitLab will trigger a ping to this external service (URL), initially the ping will only include the basic project settings. GitLab will then have an API endpoint that the external service will need to ping within 6 hours with a true or false response. This response will then be stored as the check result of the external check User will be able to use this feature to configure evaluation of the projects settings, use the project settings to pull data from other GitLab APIs or even pull data from third party services before responding with the result. <!-- triage-serverless v3 PLEASE DO NOT REMOVE THIS SECTION --> *This page may contain information related to upcoming products, features and functionality. It is important to note that the information presented is for informational purposes only, so please do not rely on the information for purchasing or planning purposes. Just like with all projects, the items mentioned on the page are subject to change or delay, and the development, release, and timing of any products, features, or functionality remain at the sole discretion of GitLab Inc.* <!-- triage-serverless v3 PLEASE DO NOT REMOVE THIS SECTION -->
epic