Run third-party tools inside Docker to stay secure

Always run third-party CLI tools inside Docker