From 2ee9266ad9f505a970c12d1fa8b9aabb4b007b87 Mon Sep 17 00:00:00 2001
From: Autar <bot@autar.ai>
Date: Mon, 27 Jul 2026 01:08:04 -0500
Subject: [PATCH] fix(docker): run container as non-root user

---
 Dockerfile | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index c66b642fd..133706017 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -16,4 +16,8 @@ RUN pip install --no-cache-dir $(find dist -name *.whl) && \
     rm -rf dist/
 
 ENTRYPOINT ["gitlab"]
+
+# Run as a non-root user for container security
+RUN (addgroup -S app 2>/dev/null || groupadd --system app) && (adduser -S -u 1001 -G app app 2>/dev/null || useradd --system --uid 1001 --gid app --create-home app)
+USER 1001
 CMD ["--version"]