Merge pull request #165 from bcaller/determinism

Deterministic file loading and vulnerability order
python-security · Aug 14, 2018 · c0e6ace · c0e6ace
2 parents 7e7b9f1 + d6ad59f
commit c0e6ace
Showing 1 changed file with 8 additions and 5 deletions.
diff --git a/pyt/__main__.py b/pyt/__main__.py
@@ -79,15 +79,18 @@ def main(command_line_args=sys.argv[1:]):  # noqa: C901
 
     nosec_lines = defaultdict(set)
 
-    for path in files:
+    if args.project_root:
+        directory = os.path.normpath(args.project_root)
+        project_modules = get_modules(directory, prepend_module_root=args.prepend_module_root)
+
+    for path in sorted(files):
         if not args.ignore_nosec:
             nosec_lines[path] = retrieve_nosec_lines(path)
 
-        if args.project_root:
-            directory = os.path.normpath(args.project_root)
-        else:
+        if not args.project_root:
             directory = os.path.dirname(path)
-        project_modules = get_modules(directory, prepend_module_root=args.prepend_module_root)
+            project_modules = get_modules(directory, prepend_module_root=args.prepend_module_root)
+
         local_modules = get_directory_modules(directory)
         tree = generate_ast(path)