Usuário não root no Alpine em Docker

WORKDIR /app
COPY . /app

# User configuration
RUN addgroup -S nonroot-group && \
    adduser -S nonroot -G nonroot-group && \
    chown -R nonroot:nonroot-group /app
USER nonroot