I'm still curious: would it solve your problem to just limit the allowed extensions of BUILD files?