Update Dockerfile

Dockerfile

@@ -1,4 +1,5 @@
 FROM python:3.10-slim
+
 WORKDIR /app
 
 # Copy and install your Python deps
@@ -11,18 +12,25 @@ COPY src/ /app/src/
 # Expose the port Streamlit will run on
 EXPOSE 8501
 
-# 1️⃣ Create writable cache/config under /tmp
+# 1️⃣ Create a non-root user
+RUN useradd -m -u 1000 user
+
+# 2️⃣ Create writable cache directories and change ownership
 RUN mkdir -p /tmp/.cache/transformers \
              /tmp/.cache/huggingface \
              /tmp/.cache/xdg \
-             /tmp/.streamlit
+             /tmp/.streamlit && \
+    chown -R user:user /tmp/.cache
+
+# 3️⃣ Switch to the non-root user
+USER user
 
-# 2️⃣ Point all caches and Streamlit config into /tmp
+# 4️⃣ Point all caches and Streamlit config into /tmp
 ENV TRANSFORMERS_CACHE=/tmp/.cache/transformers \
     HF_HOME=/tmp/.cache/huggingface \
     XDG_CACHE_HOME=/tmp/.cache/xdg \
     STREAMLIT_CONFIG_DIR=/tmp/.streamlit
 
-# 3️⃣ Launch your app
+# 5️⃣ Launch your app
 ENTRYPOINT ["streamlit", "run", "src/streamlit_app.py", \
-            "--server.port=8501", "--server.address=0.0.0.0"]
+            "--server.port=8501", "--server.address=0.0.0.0"]