fix

Dockerfile

@@ -13,6 +13,12 @@ COPY app/ app/
 COPY templates/ templates/
 COPY static/ static/
 
+# Run as non-root user
+RUN addgroup --system --gid 1000 appgroup && \
+    adduser --system --uid 1000 --gid 1000 --no-create-home appuser
+RUN chown -R appuser:appgroup /app
+USER appuser
+
 EXPOSE 8080
 
 CMD ["python", "-u", "app.py"]