DL3002: Last USER should not be root
Running as root in containers is a security risk. The last USER instruction should switch to a non-root user.