If it is possible to have a password-less keychain I can look into writing a script to import the certificate.

I solved this, I had to tell the plugin the path to the

.keychain-db

file. Which is kind of strange as all of the macOS tools operate on the keychain name and not the path or extension. The keychain was unlocked all along.