Update Dockerfile

Dockerfile

@@ -3,16 +3,23 @@ FROM python:3.10
 
 WORKDIR /app
 
+# Create a non-root user
+RUN adduser --disabled-password --gecos '' appuser
+RUN chown -R appuser:appuser /app
+
 # Copy requirements.txt first to leverage Docker cache
 COPY requirements.txt .
 RUN pip install --no-cache-dir -r requirements.txt
 
+# Download spacy model during the build phase
+RUN python -m spacy download en_core_web_sm
+
 # Copy your application code and other necessary files
 COPY app.py .
 # COPY your_service_account_file.json . # If you use a JSON file instead of base64 secret
 
-# If you need to download spacy models or other assets on build
-# RUN python -m spacy download en_core_web_sm # Uncomment if you need this model
+# Change to the non-root user
+USER appuser
 
 # Command to run your Flask application using a production-ready WSGI server like Gunicorn
 # This assumes your Flask application instance is named 'app' in 'app.py'