From 0dc737f4487fc54f79c7ab3708df7297303236c1 Mon Sep 17 00:00:00 2001
From: whjnbm <2770852170@qq.com>
Date: Wed, 3 Sep 2025 16:37:28 +0800
Subject: [PATCH] =?UTF-8?q?=E5=B0=86x509=E8=AF=81=E4=B9=A6=E5=A4=8D?=
 =?UTF-8?q?=E5=88=B6=E8=BF=9B=E5=85=A5=E5=AE=B9=E5=99=A8=E4=B8=AD?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 Dockerfile | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 6e4948c4..d0c56d3f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -60,15 +60,18 @@ FROM ${RUNTIME_IMAGE}
 # Reload version
 ARG VERSION
 
+COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
 COPY --from=builder /go/src/github.com/oauth2-proxy/oauth2-proxy/oauth2-proxy /bin/oauth2-proxy
 COPY --from=builder /go/src/github.com/oauth2-proxy/oauth2-proxy/jwt_signing_key.pem /etc/ssl/private/jwt_signing_key.pem
 
 LABEL org.opencontainers.image.licenses=MIT \
       org.opencontainers.image.description="A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers." \
       org.opencontainers.image.documentation=https://oauth2-proxy.github.io/oauth2-proxy/ \
-      org.opencontainers.image.source=https://github.com/oauth2-proxy/oauth2-proxy \
+      org.opencontainers.image.source=https://github.com/opensourceways/oauth2-proxy \
       org.opencontainers.image.url=https://quay.io/oauth2-proxy/oauth2-proxy \
       org.opencontainers.image.title=oauth2-proxy \
       org.opencontainers.image.version=${VERSION}
 
+USER 2000:2000
+
 ENTRYPOINT ["/bin/oauth2-proxy"]