diff --git a/pkg/controller/ingress-shim/BUILD.bazel b/pkg/controller/ingress-shim/BUILD.bazel
index 838c57455..855b95012 100644
--- a/pkg/controller/ingress-shim/BUILD.bazel
+++ b/pkg/controller/ingress-shim/BUILD.bazel
@@ -56,13 +56,13 @@ go_test(
 filegroup(
     name = "package-srcs",
     srcs = glob(["**"]),
-    visibility = ["//visibility:private"],
     tags = ["automanaged"],
+    visibility = ["//visibility:private"],
 )
 
 filegroup(
     name = "all-srcs",
     srcs = [":package-srcs"],
-    visibility = ["//visibility:public"],
     tags = ["automanaged"],
+    visibility = ["//visibility:public"],
 )
diff --git a/pkg/issuer/acme/http/BUILD.bazel b/pkg/issuer/acme/http/BUILD.bazel
index 3f9fbfedb..b50b8ad95 100644
--- a/pkg/issuer/acme/http/BUILD.bazel
+++ b/pkg/issuer/acme/http/BUILD.bazel
@@ -57,9 +57,9 @@ go_test(
 
 filegroup(
     name = "package-srcs",
-    visibility = ["//visibility:private"],
     srcs = glob(["**"]),
     tags = ["automanaged"],
+    visibility = ["//visibility:private"],
 )
 
 filegroup(
@@ -68,6 +68,6 @@ filegroup(
         ":package-srcs",
         "//pkg/issuer/acme/http/solver:all-srcs",
     ],
-    visibility = ["//visibility:public"],
     tags = ["automanaged"],
+    visibility = ["//visibility:public"],
 )