diff --git a/Dockerfile b/Dockerfile
index 1a3e5304..d58cb9b6 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM gcr.io/distroless/static-debian11
+FROM gcr.io/distroless/static-debian11:nonroot
 ARG TARGETARCH
 COPY bin/castai-agent-$TARGETARCH /usr/local/bin/castai-agent
-CMD ["castai-agent"]
\ No newline at end of file
+CMD ["castai-agent"]