Download release assets and zipball with CORS

[mastercoms]

Select Topic Area

Bug

Body

Right now, unlike raw.githubusercontent.com, codeload.github.com (for downloading zipballs) and the release assets download bucket do not support CORS.

I need this functionality in order to implement web app based install methods, like through the File System Access API, or even enabling user customization of assets.

Of course, this would be enabled for public repositories only.

[AurelienRibon]

I am also interested in accessing a repo zipball through a web-app!

[khowling]

+1. I create a release with an arm template built from bicep files in my repo, and I want to reference the release template download url in the Deploy to Azure button. But hit this Azure/bicep#7756

[jschroeter]

I would also like to do this to provide firmware files for a web-based ESP flasher, see gdoor-org/gdoor#12 (comment)

[puddly]

Same use case here.

We can hotlink to raw.githubusercontent.com but we cannot use GitHub releases with our web flasher: home-assistant/connectzbt1.home-assistant.io#105

[mrchantey]

Anyone know of an alternative service in the meantime?

[pzich]

I really hope this can get added. If anything it's odd that raw.githubusercontent.com does have CORS but there is no release/asset equivalent.

As a workaround, it seems like you could add an action that takes the release assets and commits them to a (probably different) repo, and then get the "raw" URL to that, but… 😬