diff --git a/model_servers/whispercpp/base/Containerfile b/model_servers/whispercpp/base/Containerfile
index fa9dff1e..1dc3bdd2 100644
--- a/model_servers/whispercpp/base/Containerfile
+++ b/model_servers/whispercpp/base/Containerfile
@@ -19,6 +19,9 @@ COPY --from=builder /app /app
 COPY --from=mwader/static-ffmpeg:6.1.1 /ffmpeg /bin/
 COPY --from=mwader/static-ffmpeg:6.1.1 /ffprobe /bin/
 
-COPY src /app/
+COPY --chown=0:0 --chmod=755 src /app
+
+USER 1001
+
 ENV AUDIO_FILE=/app/jfk.wav
 ENTRYPOINT ["sh", "run.sh"]