GitHub's content API is available over CORS: https://tools.simonwillison.net/cors-fetch#method=PUT&url=ht...

I've built client-side apps that store a GitHub token in localStorage and send them with fetch() for creating Gists and that works fine: https://tools.simonwillison.net/terminal-to-html