diff --git a/src/apt/keyring.rs b/src/apt/keyring.rs
index 3a86671..935a49d 100644
--- a/src/apt/keyring.rs
+++ b/src/apt/keyring.rs
@@ -198,37 +198,6 @@ fn validate_keyring_dir(dir_uid: u32, mode: u32, euid: u32) -> Result<(), String
     Ok(())
 }
 
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn test_validate_keyring_dir_accepts_private_dir_owned_by_current_user() {
-        assert!(validate_keyring_dir(1000, 0o700, 1000).is_ok());
-        assert!(validate_keyring_dir(1000, 0o750, 1000).is_ok());
-        assert!(validate_keyring_dir(1000, 0o1744, 1000).is_ok());
-        assert!(validate_keyring_dir(0, 0o700, 0).is_ok());
-    }
-
-    #[test]
-    fn test_validate_keyring_dir_rejects_foreign_owner() {
-        let err = validate_keyring_dir(1000, 0o700, 1001).unwrap_err();
-        assert!(err.contains("owned by uid 1000"));
-        let err = validate_keyring_dir(1001, 0o700, 1000).unwrap_err();
-        assert!(err.contains("owned by uid 1001"));
-    }
-
-    #[test]
-    fn test_validate_keyring_dir_rejects_group_or_other_writable() {
-        assert!(validate_keyring_dir(1000, 0o770, 1000).is_err());
-        assert!(validate_keyring_dir(1000, 0o706, 1000).is_err());
-        assert!(validate_keyring_dir(1000, 0o707, 1000).is_err());
-        assert!(validate_keyring_dir(1000, 0o777, 1000).is_err());
-        // Sticky bit does not neutralize the group/other write bits.
-        assert!(validate_keyring_dir(1000, 0o1777, 1000).is_err());
-    }
-}
-
 /// Download and import a PPA key using Launchpad API
 ///
 /// # Arguments
@@ -332,3 +301,34 @@ pub async fn download_trust_ppa_key(
     );
     Ok(())
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_validate_keyring_dir_accepts_private_dir_owned_by_current_user() {
+        assert!(validate_keyring_dir(1000, 0o700, 1000).is_ok());
+        assert!(validate_keyring_dir(1000, 0o750, 1000).is_ok());
+        assert!(validate_keyring_dir(1000, 0o1744, 1000).is_ok());
+        assert!(validate_keyring_dir(0, 0o700, 0).is_ok());
+    }
+
+    #[test]
+    fn test_validate_keyring_dir_rejects_foreign_owner() {
+        let err = validate_keyring_dir(1000, 0o700, 1001).unwrap_err();
+        assert!(err.contains("owned by uid 1000"));
+        let err = validate_keyring_dir(1001, 0o700, 1000).unwrap_err();
+        assert!(err.contains("owned by uid 1001"));
+    }
+
+    #[test]
+    fn test_validate_keyring_dir_rejects_group_or_other_writable() {
+        assert!(validate_keyring_dir(1000, 0o770, 1000).is_err());
+        assert!(validate_keyring_dir(1000, 0o706, 1000).is_err());
+        assert!(validate_keyring_dir(1000, 0o707, 1000).is_err());
+        assert!(validate_keyring_dir(1000, 0o777, 1000).is_err());
+        // Sticky bit does not neutralize the group/other write bits.
+        assert!(validate_keyring_dir(1000, 0o1777, 1000).is_err());
+    }
+}
diff --git a/src/apt/release.rs b/src/apt/release.rs
index a990abd..0606fd7 100644
--- a/src/apt/release.rs
+++ b/src/apt/release.rs
@@ -1080,8 +1080,6 @@ EwQbAcFaKe4rlLx9e/EXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLE
 
     /// sha256(b"test")
     const SHA256_TEST: &str = "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08";
-    /// sha256(b"")
-    const SHA256_EMPTY: &str = "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855";
 
     fn verified_noble() -> VerifiedRelease {
         let body = split_clearsigned(NOBLE_INRELEASE).unwrap();
@@ -1241,9 +1239,9 @@ garbage
         // reported as GpgvMissing, distinct from a signature failure
         let status = run_gpgv(
             "/nonexistent/pkh-test-gpgv",
-            &Path::new("/unused/scratch").to_path_buf(),
+            Path::new("/unused/scratch"),
             &[PathBuf::from("/unused/keyring.gpg")],
-            &Path::new("/unused/InRelease"),
+            Path::new("/unused/InRelease"),
             None,
         );
         assert!(matches!(status, GpgvStatus::GpgvMissing(_)));