Worked on the langgenius/dify repository to enhance Docker container security by implementing a non-root user for the web container. Focused on containerization and DevOps best practices, the work involved updating the Dockerfile to create a dedicated non-root user and adjusting permissions for both the PM2 process and the application directory. This approach reduced the risk of privilege escalation and aligned the container runtime with the principle of least privilege. By addressing security hardening at the container level, the changes improved production security posture and laid the foundation for future DevSecOps enhancements, utilizing Dockerfile and containerization skills throughout the process.