use chown

Dockerfile

@@ -69,12 +69,16 @@ VOLUME [ "${MODEL_PATH}", "${OUTPUT_PATH}" ]
 
 WORKDIR /app
 
-COPY --from=builder /app/build/libs/nshmp-haz.jar .
-COPY scripts scripts
-
 USER root
 
-RUN yum install -y jq \
-    && echo "{}" > "${CONFIG_FILE}"
+RUN yum install -y jq && \
+    chown -R usgs-user:usgs-user /app
+
+USER usgs-user
+
+COPY --from=builder --chown=usgs-user:usgs-user /app/build/libs/nshmp-haz.jar .
+COPY --chown=usgs-user:usgs-user scripts scripts
+
+RUN echo "{}" > "${CONFIG_FILE}"
 
 ENTRYPOINT [ "bash", "scripts/docker-entrypoint.sh" ]

ws.Dockerfile

@@ -52,8 +52,14 @@ ENV MODELS_DIRECTORY="/app/model"
 
 WORKDIR /app
 
-COPY --from=builder /app/build/libs/nshmp-haz.jar .
-COPY --from=builder /app/nshms.yml .
+USER root
+
+RUN chown -R usgs-user:usgs-user /app
+
+USER usgs-user
+
+COPY --from=builder --chown=usgs-user:usgs-user /app/build/libs/nshmp-haz.jar .
+COPY --from=builder --chown=usgs-user:usgs-user /app/nshms.yml .
 
 VOLUME [ "${MODELS_DIRECTORY}" ]