About GitHub Actions access to internal repositories
If your organization is owned by an enterprise account, you can share actions and workflows within your enterprise, without publishing the action or workflow publicly, by allowing GitHub Actions workflows to access an internal repository that contains the action or workflow.
Any actions or workflows stored in the internal repository can be used in workflows defined in other private and internal repositories owned by the same organization, or by any organization owned by the enterprise. Actions and workflows stored in internal repositories cannot be used in public repositories.
Warning: If you make an internal repository in your enterprise accessible to GitHub Actions workflows in other repositories, outside collaborators on the other repositories can indirectly access the internal repository, even though they do not have direct access to the internal repository. The outside collaborators can view logs for workflow runs when actions or workflows from the internal repository are used.
Sharing actions and workflows with your enterprise
- Store the action or workflow in an internal repository. For more information, see "About repositories."
- Configure the repository to allow access to workflows in other private and internal repositories. For more information, see "Managing GitHub Actions settings for a repository."