[bcurcin-godaddy]

Summary

• Adds USER node to the gren release-tooling Dockerfile so the existing unprivileged account is the image’s default runtime user.
• Package installation remains before this instruction and continues to run as root.
• Makefile -u $(CURRENT_UID):$(CURRENT_GID) override unchanged; no entrypoint or release-workflow changes.

Context

Retargeted from elastic/ecs-logging-php#103, which incorrectly targeted elastic:main (and pulled in unrelated fork commits / CLA blockers). This PR targets gdcorp-wordpress/ecs-logging-php:main with only the Dockerfile fix.

Validation

• Semgrep reproduces the missing-user finding on the original Dockerfile and reports none on the modified file.
• Focused container checks verified UID/GID 1000:1000, access to the CI files, and gren --version as the non-root user.
• Host UID/GID override and generated-file ownership verified.
• Whitespace checks passed.

Made with Cursor