By default, Security for Jira will automatically scan newly created projects and imported projects. Also, for existing projects which have been scanned at least once, Security for Jira will automatically scan new and updated issues.
However, if an existing project has not been scanned, Security for Jira will not automatically scan new and updated issues for it. This gives administrators more control over the available computing resources, preventing a potentially large scan from running unexpectedly.
The automatic scanning status of a given project can be seen in its Security Analysis.
Auto-scanning can be disabled by a Jira administrator. Simply visit the Settings Page and toggle the “Keep project scans up-to-date” option.
If the auto-scanning option is changed, reloading the Security Analysis for a project will reflect the change.