diff --git a/Dockerfile_bun b/Dockerfile_bun
index 4bbb0058..79dce7e7 100644
--- a/Dockerfile_bun
+++ b/Dockerfile_bun
@@ -3,6 +3,10 @@ FROM oven/bun:latest
 
 COPY . /app
 WORKDIR /app
+
+RUN groupadd -r qryn && useradd -r -g qryn -m qryn && chown -R qryn:qryn /app
+USER qryn
+
 RUN rm -rf package-lock.json
 RUN bun install
 
diff --git a/package-lock.json b/package-lock.json
index 71d5b7e6..e300f42f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -43,7 +43,7 @@
         "patch-package": "^6.4.7",
         "pino": "^7.6.5",
         "plugnplay": "npm:@qxip/plugnplay@^3.3.1",
-        "protobufjs": "^7.2.5",
+        "protobufjs": "7.2.5",
         "protocol-buffers": "^4.2.0",
         "protocol-buffers-encodings": "^1.1.1",
         "record-cache": "^1.1.1",