diff --git a/Dockerfile b/Dockerfile
index 1407d89b..508bdb7e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -41,11 +41,12 @@ RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 GO111MODULE=on go build -a -o manager
 # Use distroless as minimal base image to package the manager binary
 # Refer to https://github.com/GoogleContainerTools/distroless for more details
 FROM alpine:3.20
-WORKDIR /
-COPY --from=builder /workspace/manager .
-USER 65532:65532
 
 # Upgrade all packages to get latest versions with security fixes
 RUN apk upgrade --no-cache
 
+WORKDIR /
+COPY --from=builder /workspace/manager .
+USER 65532:65532
+
 ENTRYPOINT ["/manager"]