deps: update go-sev-guest

[malt3]

Upgrading to a proper release.

Changelog: https://github.com/google/go-sev-guest/releases/tag/v0.10.2

[daniel-weisse]

Not setting the expected product will now log a warning when verifying SNP statements.
You probably want to update the usage of verify.DefaultOptions(), which doesnt have a default product set.
This code should set options.Product to abi.DefaultSevProduct() to avoid the warning.

[malt3]

Not setting the expected product will now log a warning

Indeed: WARN : 2024/02/09 08:24:19.827547 verify.go:688: Attestation missing product information. KDS certificate may be invalid. Using default Milan-B1

[malt3]

Currently testing GetQuoteProto on the issuer side. Please stand by..

EDIT: we have a choice between:

• Using GetQuoteProto produces a lot of warnings since the extended report is not available (see below)
• Hardcoding milan as the product name on the verifier side works but is not flexible
• We could ask for the report and the product info in the VM and send this as a custom format that we reassemble in the verifier

│ ERROR: Logging before logger.Init.                                                                                                                                                                                                                                                            │
│ WARN : 2024/02/09 10:03:08.276541 abi.go:861: Warning: Neither VCEK nor VLEK certificate found in data pages                                                                                                                                                                                  │
│ ERROR: Logging before logger.Init.                                                                                                                                                                                                                                                            │
│ WARN : 2024/02/09 10:03:08.276791 abi.go:865: ASK certificate not found in data pages                                                                                                                                                                                                         │
│ ERROR: Logging before logger.Init.                                                                                                                                                                                                                                                            │
│ WARN : 2024/02/09 10:03:08.276809 abi.go:868: ARK certificate not found in data pages  

[katexochen]

@malt3 I think hardcoding the product is ok for now, but please file an issue upstream to a) get clarification why the library expects product name from the verifier as independent input, and b) if we can find a solution to send this info similar to GetQuoteProto when no extended report is available.

[malt3]

Upstream issue: google/go-sev-guest#108