Address review comments

MODULE.bazel

@@ -19,6 +19,7 @@ go_sdk.download(
 use_repo(
     go_sdk,
     "go_toolchains",
+    # This name is ugly on purpose to avoid a conflict with a user-named SDK.
     "io_bazel_rules_nogo",
 )
 

go/private/context.bzl

@@ -411,7 +411,10 @@ def matches_scope(label, scope):
     fail("invalid scope '%s'" % scope.name)
 
 def _matches_scopes(label, scopes):
-    return any([matches_scope(label, scope) for scope in scopes])
+    for scope in scopes:
+        if matches_scope(label, scope):
+            return True
+    return False
 
 def _get_nogo(go):
     """Returns the nogo file for this target, if enabled and in scope."""

go/private/extensions.bzl

@@ -77,6 +77,9 @@ _nogo_tag = tag_class(
         ),
         "includes": attr.label_list(
             default = _NOGO_DEFAULT_INCLUDES,
+            # The special include "all" is undocumented on purpose: With it, adding a new transitive
+            # dependency to a Go module can cause a build failure if the new dependency has lint
+            # issues.
             doc = """
 A Go target is checked with nogo if its package matches at least one of the entries in 'includes'
 and none of the entries in 'excludes'. By default, nogo is applied to all targets in the main