diff --git a/Dockerfile b/Dockerfile
index e0f7a1b..5354402 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,9 +1,5 @@
 FROM rocker/r-ver:4.3.1
 
-ARG github_sha
-ENV GITHUB_SHA=${github_sha}
-ENV RENV_CONFIG_SANDBOX_ENABLED=FALSE
-
 WORKDIR /src/unbiased
 
 # Install system dependencies
@@ -13,6 +9,8 @@ RUN apt update && apt-get install -y --no-install-recommends \
   # sodium
   libsodium-dev
 
+ENV RENV_CONFIG_SANDBOX_ENABLED=FALSE
+
 COPY ./renv ./renv
 COPY .Rprofile .
 COPY renv.lock .
@@ -23,4 +21,7 @@ COPY api/ ./api
 
 EXPOSE 3838
 
+ARG github_sha
+ENV GITHUB_SHA=${github_sha}
+
 CMD ["R", "-e", "plumber::plumb(dir = 'api') |> plumber::pr_run(host = '0.0.0.0', port = 3838)"]