Run as nob-root user

Dockerfile

@@ -4,9 +4,6 @@ FROM python:3.10
 # Set the working directory in the container
 WORKDIR /app
 
-# Change permissions to allow all users to write to the /app directory
-RUN chmod 777 /app
-
 # Install system dependencies
 RUN apt-get update && apt-get install -y --no-install-recommends \
     build-essential \
@@ -22,12 +19,24 @@ ENV GDAL_CONFIG=/usr/bin/gdal-config
 ENV CPLUS_INCLUDE_PATH=/usr/include/gdal
 ENV C_INCLUDE_PATH=/usr/include/gdal
 
+# Create a non-root user
+RUN useradd -m -s /bin/bash appuser
+
 # Copy the requirements file into the container
-COPY . .
+COPY requirements.txt .
 
 # Install Python dependencies
-RUN pip install --no-cache-dir --upgrade pip \
-    && pip install --no-cache-dir -r requirements.txt
+RUN pip install --no-cache-dir --upgrade pip && \
+    pip install --no-cache-dir -r requirements.txt
+
+# Copy the rest of the application code
+COPY . .
+
+# Change ownership of the /app directory to appuser
+RUN chown -R appuser:appuser /app
+
+# Switch to the non-root user
+USER appuser
 
 # Expose port 8501 for Streamlit
 EXPOSE 8501