Skunkworks Digital is committed to protecting the integrity and security of our codebase and the applications we build.

We welcome responsible disclosure of security vulnerabilities. If you discover a security issue in this repository or any of our digital assets, please follow these steps:

1. Send a detailed report to:
   📧 security@skunkworks.digital

2. Include the following in your report:

   • Project name and affected file/endpoint
   • Version (if applicable)
   • Steps to reproduce the issue
   • Proof-of-concept (PoC) code or screenshots
   • Potential impact and suggested remediation (if available)

3. Response Time:

   • ⏱️ Acknowledgement within 48 hours
   • 🔍 Investigation and triage within 7 business days
   • 🛠️ Patch ETA will be communicated based on severity

4. Disclosure:

   • Please do not disclose the vulnerability publicly before a fix is released.
   • We will credit responsible reporters in our release notes unless anonymity is requested.

We follow industry best practices, including:

• Regular dependency audits
• Static and dynamic code analysis
• GitHub Code Scanning & Dependabot alerts
• 2FA and role-based access control (RBAC)

We require all maintainers to use GPG-signed commits for enhanced trust.

Your help in making Skunkworks Digital safer is highly appreciated.