From 40f7f4af5a0f87f9c6f7498eae7c857c7a6c3d6e Mon Sep 17 00:00:00 2001
From: Farhan Khan <farhan@farhan.codes>
Date: Mon, 6 Apr 2026 23:31:07 -0400
Subject: [PATCH] Docker file dependency + non-root checking

---
 Dockerfile | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index c46cc6b..a74c2f7 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -27,11 +27,14 @@ WORKDIR /app/identity-manager
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o server
 
 # ---- Runtime Stage ----
-FROM gcr.io/distroless/base-debian12
+FROM debian:bookworm-slim
 
 WORKDIR /app
 COPY --from=builder /app/identity-manager/server .
 
+RUN groupadd -r nonroot && useradd -r -g nonroot nonroot && chown -R nonroot:nonroot /app
+
+
 EXPOSE 8080
 USER nonroot:nonroot
 ENTRYPOINT ["/app/server"]
\ No newline at end of file