fixing

Author: parsabr80

.github/workflows/codeql-analysis.yml

@@ -5,14 +5,35 @@ on:
     branches: [main, fix/package]
   pull_request:
     branches: [main, fix/package]
+
 jobs:
   analyze:
     runs-on: ubuntu-latest
+
     steps:
-      - uses: actions/checkout@v3
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v3
+        with:
+          node-version: '20'
+
+      # ✅ Build & fix vulnerabilities manually
+      - name: Install dependencies & fix vulnerabilities
+        run: |
+          npm install
+          npm audit fix || true
+          npm run build
 
-      - uses: github/codeql-action/init@v4
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v4
         with:
           languages: javascript
 
-      - uses: github/codeql-action/analyze@v4
+      # ❌ دیگه از autobuild استفاده نکن
+      # - name: CodeQL Autobuild
+      #   uses: github/codeql-action/autobuild@v4
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v4