diff --git a/.github/workflows/on_main.yml b/.github/workflows/on_main.yml
index dae7250..af0b9ce 100644
--- a/.github/workflows/on_main.yml
+++ b/.github/workflows/on_main.yml
@@ -8,6 +8,8 @@ on:
 
 jobs:
   build_and_release:
+    concurrency:
+      group: ${{ github.workflow }}
     runs-on: windows-latest
     permissions:
       contents: write
@@ -23,10 +25,10 @@ jobs:
           ref: main
           persist-credentials: false
 
-      - name: Install node 18
+      - name: Install node 20
         uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version: 20
           cache: yarn
           cache-dependency-path: yarn.lock
 
diff --git a/web/Dockerfile b/web/Dockerfile
index f288cdb..df6bc12 100644
--- a/web/Dockerfile
+++ b/web/Dockerfile
@@ -9,4 +9,7 @@ ENV NODE_ENV=production \
 
 EXPOSE 3000
 
+# Use a non-root user for security
+USER node
+
 CMD ["node", "server.js"]