actions-marketplace-validations/Bicep Deploy
GitHub Action for deploying to Azure
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Mar 15, 2026
- License
- MIT
Pinned Snippet
uses: actions-marketplace-validations/azure_bicep-deploy@b53ce7c8a23a07621059782bb4321173cca26d74 # no releases — HEAD as of 2026-07-10tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| type | Specifies the execution type, which can be either 'deployment' or 'deploymentStack'. | yes | — |
| operation | Specifies the operation to perform. For deployment, choose from 'create', 'validate', 'whatIf'. For deploymentStack, choose from 'create', 'delete', 'validate'. | yes | — |
| scope | Specifies the scope of the deployment or deploymentStack. For deployment, choose from 'resourceGroup', 'subscription', 'managementGroup', 'tenant'. For deploymentStack, choose from 'resourceGroup', 'subscription', 'managementGroup'. | yes | — |
| name | Specifies the name of the deployment or deploymentStack. | no | — |
| location | Specifies the location of the deployment or deploymentStack. Must be provided if the 'scope' parameter is 'subscription', 'managementGroup' or 'tenant'. | no | — |
| tenant-id | Specifies the tenant ID. Required if the 'scope' parameter is 'tenant'. | no | — |
| management-group-id | Specifies the management group ID. Required if the 'scope' parameter is 'managementGroup'. | no | — |
| subscription-id | Specifies the subscription ID. Required if the 'scope' parameter is 'subscription' or 'resourceGroup'. | no | — |
| resource-group-name | Specifies the resource group name. Required if the 'scope' parameter is 'resourceGroup'. | no | — |
| template-file | Specifies the path to the template file. | no | — |
| parameters-file | Specifies the path to the parameters file (.json or .bicepparam). | no | — |
| parameters | Specifies the inline parameters to use (as json object). | no | — |
| masked-outputs | Specifies output names to mask values for. | no | — |
| environment | Specifies the Azure environment to use. Choose from 'azureCloud', 'azureChinaCloud', 'azureGermanCloud', 'azureUSGovernment'. | no | — |
| what-if-exclude-change-types | Specifies the change types to exclude from the 'What If' operation. | no | — |
| validation-level | Specifies the validation level. Only supported for deployment what-if and validate operations. Choose from 'provider', 'template', or 'providerNoRbac'. | no | — |
| action-on-unmanage-resources | Specifies the action to take on unmanaged resources. Choose from 'delete' or 'detach'. | no | — |
| action-on-unmanage-resourcegroups | Specifies the action to take on unmanaged resource groups. Choose from 'delete' or 'detach'. | no | — |
| action-on-unmanage-managementgroup | Specifies the action to take on unmanaged management groups. Choose from 'delete' or 'detach'. | no | — |
| deny-settings-mode | Specifies the mode of the deny settings. Choose from 'denyDelete', 'denyWriteAndDelete', 'none'. | no | — |
| deny-settings-excluded-actions | Specifies the excluded actions for the deny settings. | no | — |
| deny-settings-excluded-principals | Specifies the excluded principals for the deny settings. | no | — |
| deny-settings-apply-to-child-scopes | When specified, the deny setting mode configuration also applies to the child scope of the managed resources. | no | — |
| bypass-stack-out-of-sync-error | Specifies whether to bypass the stack out of sync error. Choose from 'true' or 'false'. | no | — |
| description | Specifies the description of the deploymentStack. | no | — |
| tags | Specifies the tags for the deploymentStack. | no | — |
| bicep-version | Specifies the version of Bicep to use for compilation. If not provided, the latest version will be used. Example string: '0.38.5' | no | — |
Outputs
no outputs