My understanding is that the Auditor General is reviewing ArriveCAN. The Office of the Procurement Ombudsman is reviewing ArriveCAN. I understand that the CBSA has also tasked an internal review with respect to its procurement.
On November 30th, 2023. See this statement in context.