diff --git a/Dockerfile b/Dockerfile
index 1acc55f..d1a96e3 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -10,5 +10,6 @@ RUN CGO_ENABLED=0 go build -tags standalone -ldflags "-X main.Version=${CHECKER_
 
 FROM scratch
 COPY --from=builder /checker-ns-restrictions /checker-ns-restrictions
+USER 65534:65534
 EXPOSE 8080
 ENTRYPOINT ["/checker-ns-restrictions"]