Download release assets and zipball with CORS

[mastercoms]

Select Topic Area

Bug

Body

Right now, unlike raw.githubusercontent.com, codeload.github.com (for downloading zipballs) and the release assets download bucket do not support CORS.

I need this functionality in order to implement web app based install methods, like through the File System Access API, or even enabling user customization of assets.

Of course, this would be enabled for public repositories only.

[AurelienRibon]

I am also interested in accessing a repo zipball through a web-app!

[khowling]

+1. I create a release with an arm template built from bicep files in my repo, and I want to reference the release template download url in the Deploy to Azure button. But hit this Azure/bicep#7756

[jschroeter]

I would also like to do this to provide firmware files for a web-based ESP flasher, see gdoor-org/gdoor#12 (comment)