diff --git a/Dockerfile b/Dockerfile
index 8719b4e..0af7f16 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,3 +1,4 @@
 FROM gcr.io/distroless/static
 COPY glow /usr/local/bin/glow
+USER nonroot
 ENTRYPOINT [ "/usr/local/bin/glow" ]