From 692387409c64ed7111beb7fe83c5a8e1582bdb59 Mon Sep 17 00:00:00 2001
From: Jordi Janda <janda@mvst.co>
Date: Wed, 2 Jul 2025 17:35:07 +0200
Subject: [PATCH] feat: run action with non root user

---
 Dockerfile | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index 26aa68e..1415e4a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,8 +1,14 @@
 FROM crowdin/cli:4.8.0
 
 RUN apk --no-cache add curl git git-lfs jq gnupg;
+RUN addgroup -g 1000 runner \
+    && adduser -D -u 1000 -G runner runner
 
 COPY . .
 COPY entrypoint.sh /entrypoint.sh
 
+RUN chmod +x /entrypoint.sh \
+    && chown -R runner:runner /app /entrypoint.sh
+USER ubuntu
+
 ENTRYPOINT ["/entrypoint.sh"]