Hey Jonny Wallker, and thanks!
Not sure what you meant moving from Parameter store to Github.
What you described is what I do now; import a json with environment variables (even if they are not secret), and use chamber to store them in SSM (encrypts by default using the provided KMS key)