diff --git a/Dockerfile b/Dockerfile
index 40ae7f78..537ff525 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -35,6 +35,8 @@ ARG TARGETOS
 ARG TARGETARCH
 RUN CGO_ENABLED=0 make build
 
-FROM gcr.io/distroless/base:nonroot@sha256:99133cb0878bb1f84d1753957c6fd4b84f006f2798535de22ebf7ba170bbf434
+# Need root for GitHub Actions support
+FROM gcr.io/distroless/base@sha256:122585ba4c098993df9f8dc7285433e8a19974de32528ee3a4b07308808c84ce
 COPY --from=build /src/scorecard-action /
+COPY policies/template.yml /policy.yml
 ENTRYPOINT [ "/scorecard-action" ]