diff --git a/Dockerfile b/Dockerfile
index 779d1f1..1574de8 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -12,10 +12,12 @@ RUN make build
 
 FROM registry.access.redhat.com/ubi9/ubi-micro:9.4
 
-COPY --from=builder /src/scrubbed /usr/local/bin/
+RUN mkdir -p licenses
+
+COPY LICENSE licenses/LICENSE
 
-EXPOSE 8080
+COPY --from=builder /src/scrubbed /usr/local/bin/
 
-EXPOSE 8443
+USER 65532:65532
 
-ENTRYPOINT ["/usr/local/bin/scrubbed"]
\ No newline at end of file
+ENTRYPOINT ["/usr/local/bin/scrubbed"]
diff --git a/Dockerfile.signalilo b/Dockerfile.signalilo
index 0ca4caa..f8d2043 100644
--- a/Dockerfile.signalilo
+++ b/Dockerfile.signalilo
@@ -14,12 +14,14 @@ FROM quay.io/vshn/signalilo:v0.14.0 AS signalilo
 
 FROM registry.access.redhat.com/ubi9/ubi-micro:9.4
 
+RUN mkdir -p licenses
+
+COPY LICENSE licenses/LICENSE
+
 COPY --from=signalilo /usr/local/bin/signalilo /usr/local/bin/
 
 COPY --from=builder /src/scrubbed /usr/local/bin/
 
-EXPOSE 8080
-
-EXPOSE 8443
+USER 65532:65532
 
-ENTRYPOINT ["/usr/local/bin/scrubbed"]
\ No newline at end of file
+ENTRYPOINT ["/usr/local/bin/scrubbed"]