Update Dockerfile

Dockerfile

@@ -1,14 +1,32 @@
+# Use an official Python runtime as a parent image
 FROM python:3.9-slim
 
+# Set the working directory in the container
 WORKDIR /app
 
+# Copy the dependencies file to the working directory
 COPY requirements.txt .
+
+# Install any needed packages specified in requirements.txt
 RUN pip install --no-cache-dir -r requirements.txt
 
+# Copy the content of the local src directory to the working directory
 COPY main.py .
 
+# Create the directory for uploads
+RUN mkdir uploads
+
+# Create a non-root user and group for security
+RUN addgroup -S appgroup && adduser -S appuser -G appgroup
+
+# Change the ownership of the app directory and its contents to the new user
+RUN chown -R appuser:appgroup /app
+
+# Switch to the non-root user
+USER appuser
+
 # Make port 8000 available to the world outside this container
 EXPOSE 8000
 
-# Run the app. CMD is used to run the main command of the container
+# Run the app.
 CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "8000"]