diff --git a/Dockerfile b/Dockerfile
index 1af6273a..7bfc3dac 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -17,8 +17,10 @@ RUN pnpm deploy --filter=@imput/cobalt-api --prod /prod/api
 FROM base AS api
 WORKDIR /app
 
-COPY --from=build /prod/api /app
-COPY --from=build /app/.git /app/.git
+COPY --from=build --chown=node:node /prod/api /app
+COPY --from=build --chown=node:node /app/.git /app/.git
+
+USER node
 
 EXPOSE 9000
 CMD [ "node", "src/cobalt" ]