SNP. Checking that the microcode is up to date

[Villain88]

Hello.
Current TCB value from report on virtual machine

TCB Version:
  Microcode:   213
  SNP:         22
  TEE:         0
  Boot Loader: 4

snpguest utility allows you to check the validity of the report, but does not check the relevance of tcb values (only compares values from the vcek certificate). How can I be sure that the version used is up-to-date and does not contain vulnerabilities? Is it enough to check abi version via policies ( in my case 1.55)? I would like to have a service that would tell me what state the virtual machine is in: updated/outdated/insecure/etc.

Thanks for any answers and help