See merge request onecomp/onecomp-lab!103

Author: FKKimura

README.md

@@ -311,6 +311,12 @@ pip install vllm
 See the [vLLM Inference guide](https://FujitsuResearch.github.io/OneCompression/user-guide/vllm-inference/) for details, including Open WebUI setup instructions.
 
 
+## 📬 Contact Us
+
+- For technical questions and feature requests, please use GitHub [Issues](https://github.com/FujitsuResearch/OneCompression/issues).
+- For security vulnerabilities, please **do not** open a public Issue. See our [Security Policy](./SECURITY.md) for how to report them privately.
+- For collaborations, partnerships, and other inquiries, please contact us at [contact-onecompression@cs.jp.fujitsu.com](mailto:contact-onecompression@cs.jp.fujitsu.com).
+
 ## 📄 License
 
 See [LICENSE](./LICENSE) for more details.

SECURITY.md

@@ -0,0 +1,39 @@
+# Security Policy
+
+## Supported Versions
+
+Security updates are provided for the latest release line of Fujitsu One Compression (OneComp).
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 1.2.2   | :white_check_mark: |
+| < 1.2.2 | :x:                |
+
+We recommend always upgrading to the latest release before reporting an issue.
+
+## Reporting a Vulnerability
+
+**Please do not report security vulnerabilities through public GitHub Issues, discussions, or pull requests.**
+
+Instead, report them privately by email to:
+
+**[contact-onecompression@cs.jp.fujitsu.com](mailto:contact-onecompression@cs.jp.fujitsu.com)**
+
+To help us triage and resolve the issue quickly, please include as much of the following as you can:
+
+- The type of issue (e.g., remote code execution, information disclosure, denial of service).
+- The affected version(s) and, if applicable, the affected module or component.
+- Step-by-step instructions to reproduce the issue.
+- Proof-of-concept or exploit code, if available.
+- The potential impact of the issue, including how an attacker might exploit it.
+
+## Our Commitment
+
+- We will acknowledge receipt of your report within **5 business days**.
+- We will provide an initial assessment and expected timeline as soon as we have triaged the report.
+- We will keep you informed of our progress toward a fix and public disclosure.
+- We will credit you for the discovery unless you prefer to remain anonymous.
+
+Please make a good-faith effort to avoid privacy violations, data destruction, and service interruption while investigating. We ask that you give us a reasonable amount of time to address the issue before any public disclosure.
+
+Thank you for helping keep OneComp and its users safe.

onecomp/__version__.py

@@ -6,4 +6,4 @@
 
 """
 
-__version__ = "1.2.1"
+__version__ = "1.2.2"