diff --git a/BUILD b/BUILD
index 759a9b8..003b71f 100644
--- a/BUILD
+++ b/BUILD
@@ -1,6 +1,6 @@
 load("@bazel_gazelle//:def.bzl", "gazelle")
 load("//build/fietsje:def.bzl", "fietsje")
-load("@io_bazel_rules_go//go:def.bzl", "go_path", "nogo")
+load("@io_bazel_rules_go//go:def.bzl", "go_path")
 
 # gazelle:prefix source.monogon.dev
 # gazelle:go_naming_convention go_default_library
@@ -16,42 +16,6 @@
     visibility = ["//visibility:public"],
 )
 
-# nogo linters
-nogo(
-    name = "nogo_vet",
-    config = "nogo_config.json",
-    visibility = ["//visibility:public"],
-    # These deps enable the analyses equivalent to running `go vet`.
-    # Passing vet = True enables only a tiny subset of these (the ones
-    # that are always correct).
-    #
-    # You can see the what `go vet` does by running `go doc cmd/vet`.
-    deps = [
-        "@org_golang_x_tools//go/analysis/passes/asmdecl:go_tool_library",
-        "@org_golang_x_tools//go/analysis/passes/assign:go_tool_library",
-        "@org_golang_x_tools//go/analysis/passes/atomic:go_tool_library",
-        "@org_golang_x_tools//go/analysis/passes/bools:go_tool_library",
-        "@org_golang_x_tools//go/analysis/passes/buildtag:go_tool_library",
-        # Disable cgocall because it fails processing com_github_mattn_go_sqlite3 before exclusions are applied
-        #"@org_golang_x_tools//go/analysis/passes/cgocall:go_tool_library",
-        "@org_golang_x_tools//go/analysis/passes/composite:go_tool_library",
-        "@org_golang_x_tools//go/analysis/passes/copylock:go_tool_library",
-        "@org_golang_x_tools//go/analysis/passes/httpresponse:go_tool_library",
-        "@org_golang_x_tools//go/analysis/passes/loopclosure:go_tool_library",
-        "@org_golang_x_tools//go/analysis/passes/lostcancel:go_tool_library",
-        "@org_golang_x_tools//go/analysis/passes/nilfunc:go_tool_library",
-        "@org_golang_x_tools//go/analysis/passes/printf:go_tool_library",
-        "@org_golang_x_tools//go/analysis/passes/shift:go_tool_library",
-        "@org_golang_x_tools//go/analysis/passes/stdmethods:go_tool_library",
-        "@org_golang_x_tools//go/analysis/passes/structtag:go_tool_library",
-        "@org_golang_x_tools//go/analysis/passes/tests:go_tool_library",
-        "@org_golang_x_tools//go/analysis/passes/unmarshal:go_tool_library",
-        "@org_golang_x_tools//go/analysis/passes/unreachable:go_tool_library",
-        "@org_golang_x_tools//go/analysis/passes/unsafeptr:go_tool_library",
-        "@org_golang_x_tools//go/analysis/passes/unusedresult:go_tool_library",
-    ],
-)
-
 load("@rules_python//python:defs.bzl", "py_runtime_pair")
 
 # Python toolchains - just use the host python for now.
diff --git a/WORKSPACE b/WORKSPACE
index fad54e5..37eca88 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -66,7 +66,7 @@
 
 go_register_toolchains(
     go_version = "1.14",
-    nogo = "@//:nogo_vet",
+    nogo = "@dev_source_monogon//build/analysis:nogo",
 )
 
 load("@bazel_gazelle//:deps.bzl", "gazelle_dependencies")
diff --git a/build/analysis/BUILD.bazel b/build/analysis/BUILD.bazel
new file mode 100644
index 0000000..edaefbe
--- /dev/null
+++ b/build/analysis/BUILD.bazel
@@ -0,0 +1,37 @@
+load("@io_bazel_rules_go//go:def.bzl", "nogo")
+
+# These deps enable the analyses equivalent to running `go vet`.
+# Passing vet = True enables only a tiny subset of these (the ones
+# that are always correct).
+# You can see the what `go vet` does by running `go doc cmd/vet`.
+govet = [
+    "@org_golang_x_tools//go/analysis/passes/asmdecl:go_tool_library",
+    "@org_golang_x_tools//go/analysis/passes/assign:go_tool_library",
+    "@org_golang_x_tools//go/analysis/passes/atomic:go_tool_library",
+    "@org_golang_x_tools//go/analysis/passes/bools:go_tool_library",
+    "@org_golang_x_tools//go/analysis/passes/buildtag:go_tool_library",
+    # Disable cgocall because it fails processing com_github_mattn_go_sqlite3 before exclusions are applied
+    #"@org_golang_x_tools//go/analysis/passes/cgocall:go_tool_library",
+    "@org_golang_x_tools//go/analysis/passes/composite:go_tool_library",
+    "@org_golang_x_tools//go/analysis/passes/copylock:go_tool_library",
+    "@org_golang_x_tools//go/analysis/passes/httpresponse:go_tool_library",
+    "@org_golang_x_tools//go/analysis/passes/loopclosure:go_tool_library",
+    "@org_golang_x_tools//go/analysis/passes/lostcancel:go_tool_library",
+    "@org_golang_x_tools//go/analysis/passes/nilfunc:go_tool_library",
+    "@org_golang_x_tools//go/analysis/passes/printf:go_tool_library",
+    "@org_golang_x_tools//go/analysis/passes/shift:go_tool_library",
+    "@org_golang_x_tools//go/analysis/passes/stdmethods:go_tool_library",
+    "@org_golang_x_tools//go/analysis/passes/structtag:go_tool_library",
+    "@org_golang_x_tools//go/analysis/passes/tests:go_tool_library",
+    "@org_golang_x_tools//go/analysis/passes/unmarshal:go_tool_library",
+    "@org_golang_x_tools//go/analysis/passes/unreachable:go_tool_library",
+    "@org_golang_x_tools//go/analysis/passes/unsafeptr:go_tool_library",
+    "@org_golang_x_tools//go/analysis/passes/unusedresult:go_tool_library",
+]
+
+nogo(
+    name = "nogo",
+    config = "nogo_config.json",
+    visibility = ["//visibility:public"],
+    deps = govet,
+)
diff --git a/nogo_config.json b/build/analysis/nogo_config.json
similarity index 100%
rename from nogo_config.json
rename to build/analysis/nogo_config.json