diff --git a/Dockerfile b/Dockerfile
index e6ed08af66..dcaf4c78b5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -84,4 +84,5 @@ RUN set -eux; \
   printf 'vercel-sandbox ALL=(ALL) NOPASSWD:ALL\n' >/etc/sudoers.d/vercel-sandbox; \
   chmod 0440 /etc/sudoers.d/vercel-sandbox
 
+USER vercel-sandbox
 WORKDIR /workspace