diff --git a/Dockerfile b/Dockerfile
index a643700b..071e0aae 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,8 +1,6 @@
-FROM golang:1.24-alpine AS build
+FROM golang:1.24 AS build
 
-RUN apk update && apk add git && apk add curl
-
-WORKDIR /go/src/github.com/planetlabs/draino
+WORKDIR /work
 
 COPY go.* .
 RUN go mod download
@@ -11,9 +9,5 @@ COPY . .
 
 RUN CGO_ENABLED=0 go build -o /draino ./cmd/draino
 
-FROM alpine:3.21
-
-RUN apk update && apk add ca-certificates
-RUN addgroup -g 65532 -S nonroot && adduser -u 65532 -S nonroot -G nonroot
-USER 65532
+FROM gcr.io/distroless/static-debian12:nonroot
 COPY --from=build /draino /draino