diff --git a/Dockerfile b/Dockerfile
index 710b6ba..ccdab47 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -3,8 +3,11 @@ WORKDIR /work
 COPY . /work
 RUN npm ci && npm run build
 
-FROM gcr.io/distroless/nodejs22-debian12
+FROM gcr.io/distroless/nodejs22-debian12:nonroot
 WORKDIR /work
 COPY --from=build /work /work
 
+
+USER node
+
 CMD ["index.js"]