diff --git a/docker/Dockerfile.soda b/docker/Dockerfile.soda
index 48f6021edb80f69d70da761089c2b3e703231897..155b29c90275758a3f61ebbd3b3067759a729f26 100644
--- a/docker/Dockerfile.soda
+++ b/docker/Dockerfile.soda
@@ -59,5 +59,6 @@ RUN chmod -R +rX .; chmod 1777 /var/log/tomcat9 /var/cache/tomcat9
 WORKDIR ${CATALINA_BASE}
 RUN chmod -R a+rwX conf
 RUN chmod +rx /root && chmod +rx /root/start-soda.sh
+USER 1000:1000
 CMD ["sh", "-c", "/root/start-soda.sh"]
 
diff --git a/docker/Dockerfile.soda.temurin-jammy b/docker/Dockerfile.soda.temurin-jammy
index acc5d80f98e44491fd81682f394516b8609fc56b..893dd8469d58ac05587f27e5fa338b8445dabf83 100644
--- a/docker/Dockerfile.soda.temurin-jammy
+++ b/docker/Dockerfile.soda.temurin-jammy
@@ -49,6 +49,8 @@ env ACCESS_CONTEXT_ROOT=datasets
 # configure during start-up
 COPY start-soda.sh.soda /root/start-soda.sh
 
+
 RUN chmod +rx /root && chmod +rx /root/start-soda.sh
+USER 1000:1000
 CMD ["sh", "-c", "/root/start-soda.sh"]