openfga/OpenFGA Model Deploy Action
Github Action for deploying your Authorization Model to an OpenFGA Store
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jun 22, 2026
- License
- Apache 2.0
Pinned Snippet
uses: openfga/action-openfga-deploy@adfe9bac2a677dd74f7e9c7748bb6717de818b01 # v0.1.2tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| api-url | The OpenFGA server to import the Authorization Model into | yes | — |
| store-id | The store to import the Authorization Model into | yes | — |
| api-token | When using pre-shared key auth, specify the shared secret to use for the request | no | — |
| api-token-issuer | When using client credentials auth, specify the token issuer to use for the request | no | — |
| client-id | When using client credentials auth, specify the client ID to use for the request | no | — |
| client-secret | When using client credentials auth, specify the client secret to use for the request | no | — |
| api-audience | When using client credentials auth, specify an API audience to use for the request | no | — |
| api-scopes | When using client credentials auth, specify the API scopes to use for the request | no | — |
| model | The model to be imported into. The characters should be escaped. The value from here will be used if model-file-path is empty | no | "" |
| model-file-path | The file path of the model to be imported | no | — |
| format | Authorization model input format. Can be "fga" or "json", defaults to auto-detecting from the file extension | no | — |
| fga_cli_version | Version tag of openfga/cli to use | no | latest |
Outputs
| name | description |
|---|---|
| authorization_model_id | The ID of the deployed Authorization Model |