diff --git a/Dockerfile b/Dockerfile
index d3b975d..73fd61a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -31,6 +31,7 @@ RUN apk --no-cache add --update git
 
 RUN adduser -D hoc
 WORKDIR /home/hoc
+USER hoc
 
 # once we don't need a git binary anymore, this should be enough
 # FROM scratch