diff --git a/Dockerfile b/Dockerfile
index 353441b..240ce91 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -12,4 +12,7 @@ COPY --from=build /tmp/requirements.txt /code/requirements.txt
 RUN pip install --no-cache-dir --upgrade -r /code/requirements.txt
 COPY ./app /code/app
 
+RUN groupadd -r nonroot && useradd -r -g nonroot nonroot
+USER nonroot
+
 CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]