Docker image now runs as non-root

Author: Yordan Miladinov

Dockerfile

@@ -1,5 +1,5 @@
 # syntax=docker/dockerfile:1
-FROM golang:1.24 as builder
+FROM golang:1.24 AS builder
 ARG VERSION
 WORKDIR /build
 
@@ -8,16 +8,18 @@ COPY go.sum ./
 
 RUN go mod download
 
-ADD . .
+COPY . .
 RUN --mount=type=cache,target=/root/.cache/go-build CGO_ENABLED=0 GOOS=linux go build \
     -trimpath \
     -v \
     -ldflags "-w -s -X 'github.com/flashbots/mev-boost/config.Version=$VERSION'" \
     -o mev-boost .
 
-FROM alpine
-WORKDIR /app
+FROM alpine:3
 COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
 COPY --from=builder /build/mev-boost /app/mev-boost
+WORKDIR /app
 EXPOSE 18550
+RUN adduser -D mev
+USER mev
 ENTRYPOINT ["/app/mev-boost"]