diff --git a/Dockerfile.goreleaser b/Dockerfile.goreleaser
index 6506c5e..7cf0ca9 100644
--- a/Dockerfile.goreleaser
+++ b/Dockerfile.goreleaser
@@ -5,6 +5,9 @@
 #
 FROM alpine:3@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a
 
+RUN addgroup -S validator && adduser -S -G validator validator
+
 COPY publiccode-validator-api /usr/local/bin/publiccode-validator-api
 
+USER validator
 ENTRYPOINT ["/usr/local/bin/publiccode-validator-api"]