Check if Dependabot automated security fixes are enabled

script.sh

#!/bin/bash

ORGANIZATION="your-org"

# Get list of repositories (public and private) in the organization -- ignore archived
repos=$(gh repo list $ORGANIZATION --no-archived --limit 400 --json name --jq '.[].name')

for repo in $repos; do
    result=$(gh api repos/$ORGANIZATION/$repo/automated-security-fixes)

    enabled=$(echo $result | jq '.enabled')
    if [ "$enabled" != "true" ]; then
        echo "$repo - dependabot security updates aren't enabled"
    fi

    paused=$(echo $result | jq '.paused')
    if [ "$paused" = "true" ]; then
        echo "$repo - dependabot security updates are paused"
    fi
done

This assumes you have 400 repositories or less in an organization. So... make it paginate the request if you have more or update the limit.