From e73bfb3b9f814f9db3f8993f59debf7cbf8daf8f Mon Sep 17 00:00:00 2001
From: Fabio Bonelli <fb@fabiobonelli.it>
Date: Mon, 9 Nov 2026 20:50:49 +0000
Subject: [PATCH] chore: run release image as unprivileged user

---
 Dockerfile.goreleaser | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/Dockerfile.goreleaser b/Dockerfile.goreleaser
index 6506c5e..7cf0ca9 100644
--- a/Dockerfile.goreleaser
+++ b/Dockerfile.goreleaser
@@ -5,6 +5,9 @@
 #
 FROM alpine:3@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a
 
+RUN addgroup -S validator && adduser -S -G validator validator
+
 COPY publiccode-validator-api /usr/local/bin/publiccode-validator-api
 
+USER validator
 ENTRYPOINT ["/usr/local/bin/publiccode-validator-api"]