Set Trust settings in keychain on Mac OS 10.13.6

https://stackoverflow.com/questions/14733764/mac-code-signing-bypass-the-keychain-access-private-key-prompt-from-terminal

You can configure this from the Terminal when you import the certificate into your Keychain. Import command: import inputfile [-k keychain] [-t type] [-f format] [-w] [-P passphrase] [options...] To set the access control to "Allow all applications to access this item", just add the flag "-A".

Of course the cert might be pushed via config already, but you can re-import using a package/temp location/postinstall method.

The cert is auto-created via Company Portal.

This cannot be scripted, by design I believe. For security reasons.