They were put there for some testing and from their mailing list it sounds like it will be removed as it's unnecessary.

Apologies that this has caused problems for you.
This is just some old test data used to confirm that the parser in the command line utility works, and I don't think anyone thought about the redistribution legality implications of putting those images into the repo.
I agree that it's not a good situation and we should try to fix it.

There is no real reason for these binaries to be in those test fixtures — the point of the tests is just to verify parsing for vboot data structures, the actual contents of the file are not really relevant.

• Julius Werner, member of the Advisory Group

https://mail.coreboot.org/hyperkitty/list/coreboot@coreboot.org/thread/6JI7KTJ3QVK6Q5BLNWREX2IBVZP7GCLP/

edit: "there is a general advisory committee made up of any individuals who wish to help out and discuss their thoughts with the leadership board. This is done at bi-weekly meetings, which all members of the project are invited to attend and contribute."
https://coreboot.org/leadership.html