diff --git a/.github/workflows/unlighthouse.yaml b/.github/workflows/unlighthouse.yaml
index 955d2c2..18c4f0a 100644
--- a/.github/workflows/unlighthouse.yaml
+++ b/.github/workflows/unlighthouse.yaml
@@ -85,7 +85,7 @@ jobs:
             -F "password=${{ secrets.TEST_USER_PASSWORD }}" \
             --verbose 2>&1 | awk -F'pb_auth=' '/pb_auth/{print $2;exit}' | awk -F';' '{print $1}')
 
-          unlighthouse-ci
+          unlighthouse-ci --site "$SCAN_URL"
 
       - name: Upload report to Cloudflare pages
         uses: cloudflare/wrangler-action@v3.4.1
diff --git a/backend/Dockerfile b/backend/Dockerfile
index 4d363c6..d676c83 100644
--- a/backend/Dockerfile
+++ b/backend/Dockerfile
@@ -1,5 +1,10 @@
 FROM alpine:latest
 
+RUN addgroup -S nonroot \
+    && adduser -S nonroot -G nonroot
+
+USER nonroot
+
 ARG PB_VERSION=0.21.3
 
 RUN apk add --no-cache \