diff --git a/scanners/git-repo-scanner/scanner/Dockerfile b/scanners/git-repo-scanner/scanner/Dockerfile
index 0dfb999f82..d8ddfe2095 100644
--- a/scanners/git-repo-scanner/scanner/Dockerfile
+++ b/scanners/git-repo-scanner/scanner/Dockerfile
@@ -3,9 +3,9 @@
 # SPDX-License-Identifier: Apache-2.0
 
 FROM docker.io/python:3-alpine
-
 COPY . /scripts/
 RUN pip install -r /scripts/requirements.txt
-CMD ["/bin/sh"]
+RUN adduser -S -H -u 1001 gitreposcanner
+USER gitreposcanner
 WORKDIR /scripts
 ENTRYPOINT ["python", "-m", "git_repo_scanner"]