Update Dockerfile

Dockerfile

@@ -1,9 +1,6 @@
 # Use an official Python runtime as a parent image
 FROM python:3.10-slim
 
-# Set working directory
-WORKDIR /app
-
 # Install system dependencies (poppler-utils and tesseract-ocr)
 RUN apt-get update && apt-get install -y \
     poppler-utils \
@@ -11,6 +8,12 @@ RUN apt-get update && apt-get install -y \
     libtesseract-dev \
     && rm -rf /var/lib/apt/lists/*
 
+# Create a non-root user
+RUN useradd -m appuser
+
+# Set working directory
+WORKDIR /app
+
 # Copy requirements.txt and install Python dependencies
 COPY requirements.txt .
 RUN pip install --no-cache-dir -r requirements.txt
@@ -18,6 +21,12 @@ RUN pip install --no-cache-dir -r requirements.txt
 # Copy the app code
 COPY app.py .
 
+# Create a writable directory for Gradio flagging
+RUN mkdir -p /tmp/flagged && chown -R appuser:appuser /tmp/flagged
+
+# Switch to non-root user
+USER appuser
+
 # Expose the port Gradio will run on
 EXPOSE 7860