From 480e64c34bd52e41d1b81bde4fef6c7d1ff9c11a Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 13 Apr 2026 14:50:48 +0000
Subject: [PATCH 1/2] Initial plan


From 8311a67a53984484eaa331d786f15b615a2b243f Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 13 Apr 2026 14:56:32 +0000
Subject: [PATCH 2/2] fix(rust-guard): remove pub from LogLevel enum and
 deduplicate extract_repo_info call

Agent-Logs-Url: https://github.com/github/gh-aw-mcpg/sessions/fbe0c479-7e12-4bf0-bd7d-50de00c23b16

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>
---
 guards/github-guard/rust-guard/src/labels/response_paths.rs | 3 +--
 guards/github-guard/rust-guard/src/lib.rs                   | 2 +-
 2 files changed, 2 insertions(+), 3 deletions(-)

diff --git a/guards/github-guard/rust-guard/src/labels/response_paths.rs b/guards/github-guard/rust-guard/src/labels/response_paths.rs
index f22238da..2059bda3 100644
--- a/guards/github-guard/rust-guard/src/labels/response_paths.rs
+++ b/guards/github-guard/rust-guard/src/labels/response_paths.rs
@@ -420,8 +420,7 @@ pub fn label_response_paths(
 
         // === File Contents - repo-scoped secrecy ===
         "get_file_contents" => {
-            let (_arg_owner, _arg_repo, arg_repo_full) = extract_repo_info(tool_args);
-            let (arg_owner, arg_repo, _) = extract_repo_info(tool_args);
+            let (arg_owner, arg_repo, arg_repo_full) = extract_repo_info(tool_args);
             let secrecy = repo_visibility_secrecy(&arg_owner, &arg_repo, &arg_repo_full, ctx);
             let branch_ref = tool_args.get("ref").and_then(|v| v.as_str()).unwrap_or("");
             let file_integrity = if is_default_branch_ref(branch_ref) {
diff --git a/guards/github-guard/rust-guard/src/lib.rs b/guards/github-guard/rust-guard/src/lib.rs
index 8e7960f9..9174a8ec 100644
--- a/guards/github-guard/rust-guard/src/lib.rs
+++ b/guards/github-guard/rust-guard/src/lib.rs
@@ -133,7 +133,7 @@ pub fn invoke_backend(
 
 /// Log levels matching the gateway's expectations
 #[repr(u32)]
-pub enum LogLevel {
+enum LogLevel {
     Debug = 0,
     Info = 1,
     Warn = 2,