Update Dockerfile

Dockerfile

@@ -1,5 +1,5 @@
 # Use a slim Python 3.9 base image
-FROM python:3.9-slim-buster
+FROM python:3.9-slim-buster@sha256:320a7a4250aba4249f458872adecf92eea88dc6abd2d76dc5c0f01cac9b53990
 
 # Set environment variables
 ENV PYTHONDONTWRITEBYTECODE=1 \
@@ -28,18 +28,17 @@ COPY requirements.txt .
 RUN pip install --no-cache-dir -r requirements.txt || { echo "Failed to install requirements"; exit 1; }
 
 # Pre-download the SentenceTransformer model
-RUN python -c "from sentence_transformers import SentenceTransformer; SentenceTransformer('all-MiniLM-L6-v2')" || { echo "Failed to pre-download model"; exit 1; }
+RUN python -c "from sentence_transformers import SentenceTransformer; SentenceTransformer('all-MiniLM-L6-v2', cache_folder='/app/cache')" || { echo "Failed to pre-download model"; exit 1; }
 
-# Create necessary directories
+# Create directories, user, and set permissions
 RUN mkdir -p /app/data /app/cache && \
+    useradd -m myuser && \
     chown -R myuser:myuser /app
 
 # Copy all project files
 COPY . .
 
-# Create non-root user and set permissions
-RUN useradd -m myuser && \
-    chown -R myuser:myuser /app
+# Set non-root user
 USER myuser
 
 # Expose port for Gunicorn