diff --git a/diego-docker-app/Dockerfile b/diego-docker-app/Dockerfile
index 714d279..fd9e961 100644
--- a/diego-docker-app/Dockerfile
+++ b/diego-docker-app/Dockerfile
@@ -15,4 +15,7 @@ WORKDIR /myapp
 
 RUN adduser -D vcap
 
+# set user to 'nobody' so that it is non-root
+USER 65534
+
 CMD ["dockerapp"]