diff --git a/install/sidecar-disk-collector/Dockerfile b/install/sidecar-disk-collector/Dockerfile
index bf22f96..e7185ba 100644
--- a/install/sidecar-disk-collector/Dockerfile
+++ b/install/sidecar-disk-collector/Dockerfile
@@ -1,6 +1,9 @@
 FROM alpine:3.20
 RUN apk add --no-cache util-linux bash
+# Create non-root user for security (CWE-250: Execution with Unnecessary Privileges)
+RUN adduser -D -u 1000 nomaduser
 COPY collect-disk-info.sh /usr/local/bin/collect-disk-info.sh
 RUN chmod +x /usr/local/bin/collect-disk-info.sh && mkdir -p /storage
 WORKDIR /storage
+USER nomaduser
 CMD ["/usr/local/bin/collect-disk-info.sh"]
diff --git a/install/sidecar-updater/Dockerfile b/install/sidecar-updater/Dockerfile
index 527c321..7362e51 100644
--- a/install/sidecar-updater/Dockerfile
+++ b/install/sidecar-updater/Dockerfile
@@ -3,6 +3,9 @@ FROM alpine:3.20
 # Install Docker CLI for compose operations
 RUN apk add --no-cache docker-cli docker-cli-compose bash jq
 
+# Create non-root user for security (CWE-250: Execution with Unnecessary Privileges)
+RUN adduser -D -u 1000 nomaduser
+
 # Copy the update watcher script
 COPY update-watcher.sh /usr/local/bin/update-watcher.sh
 RUN chmod +x /usr/local/bin/update-watcher.sh
@@ -11,5 +14,5 @@ RUN chmod +x /usr/local/bin/update-watcher.sh
 RUN mkdir -p /shared
 
 WORKDIR /shared
-
+USER nomaduser
 CMD ["/usr/local/bin/update-watcher.sh"]