push3

Dockerfile

@@ -36,13 +36,19 @@ COPY requirements.txt /tmp/requirements.txt
 RUN pip install --no-cache-dir --upgrade pip \
     && pip install --no-cache-dir -r /tmp/requirements.txt
 
-# Copy application code
-COPY . /code
-
+# Create a user and set permissions
+RUN useradd -m -u 1000 user
 RUN chown -R user:user /code
 
+# Copy application code
+COPY --chown=user . /code
+
 WORKDIR /code
 
+# Switch to the new user
+USER user
+ENV PATH="/home/user/.local/bin:$PATH"
+
 # Use secrets during build
 RUN --mount=type=secret,id=HOST,required=true \
     --mount=type=secret,id=DJANGO_SECRET,required=true \