diff --git a/charts/memberships/templates/install.yaml b/charts/memberships/templates/install.yaml
index 7179d1b..1d0034b 100644
--- a/charts/memberships/templates/install.yaml
+++ b/charts/memberships/templates/install.yaml
@@ -54,7 +54,7 @@
           containerPort: 8081
           protocol: TCP
         command:
-        - memberships
+        - /usr/bin/memberships
         - --port=8080
         - --api-port=8081
         - --db-path=/data/memberships.db
diff --git a/core/auth/memberships/Dockerfile b/core/auth/memberships/Dockerfile
index f77a43f..37e975d 100644
--- a/core/auth/memberships/Dockerfile
+++ b/core/auth/memberships/Dockerfile
@@ -1,6 +1,5 @@
-FROM alpine:latest
+FROM gcr.io/distroless/static:nonroot
 
 ARG TARGETARCH
 
 COPY memberships_${TARGETARCH} /usr/bin/memberships
-RUN chmod +x /usr/bin/memberships