diff --git a/.circleci/config.yml b/.circleci/config.yml
index e9fce981..0661491e 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -60,6 +60,7 @@ jobs:
             curl -L https://codeclimate.com/downloads/test-reporter/test-reporter-latest-linux-amd64 > /usr/local/bin/cc-test-reporter
             chmod +x /usr/local/bin/cc-test-reporter
             /usr/local/bin/cc-test-reporter before-build
+      - run: sudo chown -R 5000 .
       - run:
           name: Run tests
           command: |
diff --git a/Dockerfile b/Dockerfile
index 854c2b20..2eea6695 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -23,6 +23,12 @@ RUN poetry install --no-dev --no-interaction --no-ansi
 
 COPY . /src
 
+RUN useradd --no-create-home --system -s /bin/false --uid 5000 uwsgi
+
+RUN chown -R uwsgi /src
+
 EXPOSE 5000
 
+USER uwsgi
+
 CMD [ "uwsgi", "--ini", "app.ini" ]
diff --git a/pytest.ini b/pytest.ini
index c1fa8785..1ceab942 100644
--- a/pytest.ini
+++ b/pytest.ini
@@ -1,2 +1,2 @@
 [pytest]
-addopts = -p no:warnings
\ No newline at end of file
+addopts = -p no:warnings