diff --git a/Dockerfile b/Dockerfile
index df42e18a79..34573202b3 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,11 +1,15 @@
 FROM alpine:3.9
 
-COPY kube-state-metrics /
+RUN adduser -D kube-state-metrics
 
-ENTRYPOINT ["/kube-state-metrics", "--port=8080", "--telemetry-port=8081"]
+FROM gcr.io/distroless/static
 
-RUN adduser -D kube-state-metrics
+COPY kube-state-metrics /
+
+COPY --from=0 /etc/passwd /etc/passwd
 
 USER kube-state-metrics
 
+ENTRYPOINT ["/kube-state-metrics", "--port=8080", "--telemetry-port=8081"]
+
 EXPOSE 8080 8081