diff --git a/scanners/gitleaks/scanner/Dockerfile b/scanners/gitleaks/scanner/Dockerfile
index 4efc1b3741..c5ae1e9c6c 100644
--- a/scanners/gitleaks/scanner/Dockerfile
+++ b/scanners/gitleaks/scanner/Dockerfile
@@ -4,5 +4,8 @@
 
 ARG scannerVersion=latest
 FROM zricethezav/gitleaks:${scannerVersion}
+RUN adduser -S -H -u 1001 gitleaks
 COPY wrapper.sh /wrapper.sh
-ENTRYPOINT [ "sh", "/wrapper.sh" ]
+RUN chmod o+x ./wrapper.sh
+USER gitleaks
+ENTRYPOINT ["./wrapper.sh" ]
diff --git a/scanners/gitleaks/scanner/wrapper.sh b/scanners/gitleaks/scanner/wrapper.sh
index 4e3522bba7..8ec55a0650 100644
--- a/scanners/gitleaks/scanner/wrapper.sh
+++ b/scanners/gitleaks/scanner/wrapper.sh
@@ -1,3 +1,4 @@
+#!/bin/sh
 # SPDX-FileCopyrightText: 2020 iteratec GmbH
 #
 # SPDX-License-Identifier: Apache-2.0