diff --git a/Dockerfile.cli b/Dockerfile.cli
index fd1d99a2b2..5a39afbe96 100644
--- a/Dockerfile.cli
+++ b/Dockerfile.cli
@@ -2,12 +2,13 @@ FROM docker.io/library/python:3.11-slim-bullseye
 
 RUN addgroup --system nonroot \
     && adduser --system nonroot --ingroup nonroot
-USER nonroot
 
 RUN apt-get update && \
     apt-get install -y git && \
     rm -rf /var/lib/apt/lists/*
 
+USER nonroot
+
 WORKDIR /app
 
 RUN git clone -b master https://github.com/Clinical-Genomics/cg.git /app