Fixing cross site scripting codescan alert

.github/workflows/releases.yml

@@ -14,11 +14,13 @@ jobs:
         with:
           fetch-depth: 0
       - name: Set up Go 1.14
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v2-beta
+        with:
+          go-version: 1.14
       - name: Set CURRENT_TAG
         run: echo "GORELEASER_CURRENT_TAG=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v3
+        uses: goreleaser/goreleaser-action@v1
         with:
           version: latest
           args: release --rm-dist

test/github.go

@@ -159,7 +159,7 @@ func main() {
 
 		if repoName != existingRepo {
 			w.WriteHeader(http.StatusNotFound)
-			_, err := w.Write([]byte(fmt.Sprintf("Repo %s not found", repoName)))
+			_, err := w.Write([]byte(fmt.Sprintf("Repo %s not found", html.EscapeString(repoName))))
 			if err != nil {
 				panic(err)
 			}