build/analysis: move our checks into its own exclusion

Change-Id: Ifc9205d35c567973ceafe1557a4705531e68d9fd
Reviewed-on: https://review.monogon.dev/c/monogon/+/4484
Reviewed-by: Leopold Schabel <leo@monogon.tech>
Tested-by: Jenkins CI
diff --git a/build/analysis/BUILD.bazel b/build/analysis/BUILD.bazel
index 395c33f..bbb80d2 100644
--- a/build/analysis/BUILD.bazel
+++ b/build/analysis/BUILD.bazel
@@ -113,9 +113,15 @@
     # All analyzers that should be disabled for external, generated or cgo code.
     exclude_from_external(ALL_STATICCHECK_ANALYZERS),
     exclude_from_external([
-        "exclude_files",
         "commentwrap",
+        "gocheckcompilerdirectives",
+        "noioutil",
         "importsort",
+        "gofmt",
+        "haslicense",
+    ]),
+    exclude_from_external([
+        "exclude_files",
         "unreachable",
         "unusedwrite",
         "composites",
@@ -127,14 +133,10 @@
         "returnerrcheck",
         "hash",
         "errcmp",
-        "gofmt",
         "unparam",
-        "haslicense",
         "nilness",
         "printf",
-        "gocheckcompilerdirectives",
         "copylocks",
-        "noioutil",
         "lostcancel",
     ]),