diff --git a/.cspell.json b/.cspell.json
index eefd53e..df9a27f 100644
--- a/.cspell.json
+++ b/.cspell.json
@@ -10,7 +10,13 @@
     "report",
     ".*"
   ],
-  "ignoreWords": ["niek", "npalm", "nvmrc", "markdownlintignore"],
+  "ignoreWords": [
+    "niek",
+    "npalm",
+    "nvmrc",
+    "markdownlintignore",
+    "devcontainer"
+  ],
   "language": "en",
   "noConfigSearch": true,
   "words": ["linebreak", "megalinter", "oxsecurity", "REAMDE"],
diff --git a/.devcontainer/Dockerfile b/.devcontainer/Dockerfile
index 67be60b..eae4de4 100644
--- a/.devcontainer/Dockerfile
+++ b/.devcontainer/Dockerfile
@@ -1,4 +1,7 @@
 ARG VARIANT="20-bullseye"
-FROM mcr.microsoft.com/vscode/devcontainers/typescript-node:0-${VARIANT}
+FROM mcr.microsoft.com/vscode/devcontainers/typescript-node:1-${VARIANT}
 
-RUN apt-get update && apt-get install bash-completion gnupg2 --no-install-recommends -y
+# hadolint ignore=DL3008
+RUN apt-get update && apt-get install bash-completion gnupg2 --no-install-recommends -y && rm -rf /var/lib/apt/lists/*
+
+USER node
diff --git a/.trivyignore b/.trivyignore
new file mode 100644
index 0000000..f77baad
--- /dev/null
+++ b/.trivyignore
@@ -0,0 +1,2 @@
+# Healthcheck isn't necessary in a devcontainer
+AVD-DS-0026