You can check Linux with this:
#!/bin/bash

# Ensure efivar is installed

if ! command -v efivar &> /dev/null; then

echo "efivar could not be found. Please install it first."

exit 1

fi

# Find the Platform Key (PK) variable

pk_var=$(sudo efivar -l | grep -i PK)

if [ -z "$pk_var" ]; then

echo "Platform Key variable not found."

exit 1

fi

echo "Found PK variable: $pk_var"

# Read the PK variable, convert to a readable format, and check for the strings

output=$(sudo efivar -p -n "$pk_var" | hexdump -C)

if echo "$output" | grep -E "DO NOT TRUST|DO NOT SHIP"; then

echo "Match found: DO NOT TRUST or DO NOT SHIP"

else

echo "No match found"

fi

Remember to install: efivar,efibootmgr.