run container as non root user

Dockerfile

-FROM --platform=$BUILDPLATFORM alpine:3.21.2 AS ca-certs
 FROM --platform=$BUILDPLATFORM tonistiigi/xx:1.6.1 AS xx
 FROM --platform=$BUILDPLATFORM golang:1.23.4 AS build
 ARG TARGETPLATFORM
@@ -9,9 +8,8 @@ RUN go mod download
 COPY ./ ./
 RUN CGO_ENABLED=0 GOOS=linux xx-go build -ldflags "-w -s" -o /imgshare
 
-FROM scratch
+FROM jonasled.dev/infra/images/scratch-rootless@sha256:76b6d85e02b63bb28a9b62998f4d0fb474d24297d6caf6e257763fe557858718
 ENV GIN_MODE=release
-COPY --from=ca-certs /etc/ssl /etc/ssl
 COPY --from=build /imgshare /imgshare
 ENTRYPOINT ["/imgshare"]