diff --git a/Dockerfile b/Dockerfile
index e2f28e4a..96a3a77b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -14,6 +14,10 @@ FROM alpine:3.19
 
 LABEL maintainer="LinkedIn Burrow https://github.com/linkedin/Burrow"
 
+RUN adduser -u 10001 burrow -D
+USER burrow
+WORKDIR /app
+
 COPY --from=builder /tmp/burrow /app/
 COPY docker-config/burrow.toml /etc/burrow/
 
diff --git a/Dockerfile.gorelease b/Dockerfile.gorelease
index 0da90a61..5f8147a8 100644
--- a/Dockerfile.gorelease
+++ b/Dockerfile.gorelease
@@ -1,6 +1,9 @@
 FROM alpine:3.19
 LABEL maintainer="LinkedIn Burrow https://github.com/linkedin/Burrow"
 
+RUN adduser -u 10001 burrow -D
+USER burrow
+
 WORKDIR /app
 COPY burrow /app/