diff --git a/Dockerfile b/Dockerfile
index 222b9ea..db7186c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -9,7 +9,7 @@ COPY . ./
 RUN make build-linux
 
 # hadolint ignore=DL3006
-FROM gcr.io/distroless/static-debian12
+FROM gcr.io/distroless/static-debian12:nonroot
 
-COPY --from=builder /go/src/github.com/mono0x/my-scraper/my-scraper.linux /app
+COPY --from=builder --chown=nonroot:nonroot /go/src/github.com/mono0x/my-scraper/my-scraper.linux /app
 CMD ["/app"]