Unattended installtion of STM32 Signing Tool

[UVV]

According to this article the signing tool is a part of STM32CubeProgrammer. I need a signing tool during my Yocto build to be able to build signed images. The best way to guarantee a reproducibility of the build is to launch it in a dedicated container (to make sure the host system is the same on all developer / CI machines).

So the few questions are:

1. I can't automatically download only the signing tool, can I? The download of STM32CubeProgrammer package requires for me to accept the license.
2. It seems that STM32CubeProgrammer installer doesn't have any command line options. I would like to at least have unattended installation, automatically accepting the license and setting installation path in a non-interactive way. CubeProggrammer installation manual doesn't mention any. All that is required, for example, during 'docker build' execution.
3. Is there an open source signing tool alternative?

[AZaki.2]

Hi @UVV ,

you can use a lightweight C++ alternative that has dependency to only OpenSSL:

https://github.com/embetrix/stm32mp-sign-tool