Update Dockerfile

Dockerfile

@@ -1,11 +1,9 @@
 FROM python:3.10-slim
 
-# system deps
 RUN apt-get update && apt-get install -y \
     git git-lfs ffmpeg libsm6 libxext6 libgl1 && \
     rm -rf /var/lib/apt/lists/*
 
-# app dir
 WORKDIR /app
 COPY requirements.txt .
 RUN pip install --no-cache-dir -r requirements.txt
@@ -16,14 +14,16 @@ ENV HF_HOME=/app/.cache \
     HF_DATASETS_CACHE=/app/.cache/datasets \
     TRANSFORMERS_CACHE=/app/.cache/transformers
 
-# ensure dirs exist and are writable
 RUN mkdir -p /app/.cache/hub /app/.cache/datasets /app/.cache/transformers
 
-# app code
+# copy code and data
 COPY . .
 
-# gradio runs on PORT
-ENV GRADIO_SERVER_NAME=0.0.0.0 \
-    PORT=7860
+# create non-root user and give it ownership
+RUN useradd -m -u 1000 user && chown -R user:user /app
+USER user
+
+ENV GRADIO_SERVER_NAME=0.0.0.0
+ENV PORT=7860
 
 CMD ["python","app.py"]