According to the documentation, “You can write your own actions to use in your workflow or share the actions you build with the GitHub community. To share actions you’ve built, your repository must be public.”
This will not work for my organization due to legal and security policies, so I hope there is news about supporting private sharing of actions at least within an organization.