diff --git a/scanner/Dockerfile b/scanner/Dockerfile
index 15fc49a2..3e0fc3b8 100644
--- a/scanner/Dockerfile
+++ b/scanner/Dockerfile
@@ -16,10 +16,16 @@ WORKDIR /app
 # 1.使用阿里云 Alpine 镜像源加速 apk 下载
 RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.aliyun.com/g' /etc/apk/repositories
 
-# 2. 只在包版本变化时重新安装（分层缓存）
-#RUN apk add --no-cache gcc musl-dev libffi-dev wget && \
-#      pip install --no-cache-dir -i https://mirrors.aliyun.com/pypi/simple/ cisco-ai-skill-scanner && \
-#      apk del gcc musl-dev libffi-dev
+# 2. 安装依赖包（使用清华 PyPI 镜像）
+RUN apk add --no-cache gcc musl-dev libffi-dev wget && \
+      pip install --no-cache-dir -i https://pypi.tuna.tsinghua.edu.cn/simple cisco-ai-skill-scanner && \
+      apk del gcc musl-dev libffi-dev
+
+# 创建 app 用户和组
+RUN addgroup -S app && \
+    adduser -S app -G app && \
+    mkdir -p /tmp/skillhub-scans && \
+    chown app:app /tmp/skillhub-scans
 
 USER app