diff --git a/guards/github-guard/rust-guard/src/labels/response_paths.rs b/guards/github-guard/rust-guard/src/labels/response_paths.rs
index f22238da..2059bda3 100644
--- a/guards/github-guard/rust-guard/src/labels/response_paths.rs
+++ b/guards/github-guard/rust-guard/src/labels/response_paths.rs
@@ -420,8 +420,7 @@ pub fn label_response_paths(
 
         // === File Contents - repo-scoped secrecy ===
         "get_file_contents" => {
-            let (_arg_owner, _arg_repo, arg_repo_full) = extract_repo_info(tool_args);
-            let (arg_owner, arg_repo, _) = extract_repo_info(tool_args);
+            let (arg_owner, arg_repo, arg_repo_full) = extract_repo_info(tool_args);
             let secrecy = repo_visibility_secrecy(&arg_owner, &arg_repo, &arg_repo_full, ctx);
             let branch_ref = tool_args.get("ref").and_then(|v| v.as_str()).unwrap_or("");
             let file_integrity = if is_default_branch_ref(branch_ref) {
diff --git a/guards/github-guard/rust-guard/src/lib.rs b/guards/github-guard/rust-guard/src/lib.rs
index 8e7960f9..9174a8ec 100644
--- a/guards/github-guard/rust-guard/src/lib.rs
+++ b/guards/github-guard/rust-guard/src/lib.rs
@@ -133,7 +133,7 @@ pub fn invoke_backend(
 
 /// Log levels matching the gateway's expectations
 #[repr(u32)]
-pub enum LogLevel {
+enum LogLevel {
     Debug = 0,
     Info = 1,
     Warn = 2,