updated to run as user instead of root

Dockerfile

@@ -24,10 +24,12 @@ RUN pip wheel --no-cache-dir --no-deps --wheel-dir /usr/src/app/wheels -r requir
 # pull official base image
 FROM dvcorg/cml:0-dvc2-base1-gpu
 
-# create app home
+# create home directory and app user
-ENV APP_HOME = /home/app
+RUN mkdir -p /home/app && \
-RUN mkdir -p $APP_HOME
+    addgroup --system app && \
-WORKDIR $APP_HOME
+    adduser --system --group app
+
+# add folder to store repo in
 RUN mkdir -p /home/app/repo
 
 # install packages from builder
@@ -36,7 +38,14 @@ COPY --from=builder /usr/src/app/requirements.txt requirements.txt
 RUN pip install --no-cache /wheels/*
 
 # copy in files
+WORKDIR /home/app
 COPY ./code .
 
+# change ownership to app user
+RUN chown -R app:app /home/app
+
+# change to the app user
+USER app
+
 # start execution
 ENTRYPOINT [ "python", "main.py" ]