diff --git a/deploy-ssh/action.yaml b/deploy-ssh/action.yaml
new file mode 100644
index 0000000..c70140b
--- /dev/null
+++ b/deploy-ssh/action.yaml
@@ -0,0 +1,64 @@
+name: Despliegue SSH
+description: Ejecuta un script de despliegue remoto por SSH
+
+inputs:
+  ssh-private-key:
+    description: Llave privada SSH
+    required: true
+
+  known-hosts:
+    description: Contenido del archivo known_hosts
+    required: true
+
+  host:
+    description: Dirección IP o hostname del servidor
+    required: true
+
+  user:
+    description: Usuario SSH
+    required: false
+    default: deploy
+
+  deploy-script:
+    description: Ruta absoluta del script remoto
+    required: true
+
+  commit-sha:
+    description: Commit validado que será desplegado
+    required: true
+
+runs:
+  using: composite
+
+  steps:
+    - name: Preparar SSH
+      shell: bash
+      env:
+        SSH_PRIVATE_KEY: ${{ inputs.ssh-private-key }}
+        SSH_KNOWN_HOSTS: ${{ inputs.known-hosts }}
+      run: |
+        set -euo pipefail
+
+        install -d -m 700 "$HOME/.ssh"
+
+        printf '%s\n' "$SSH_PRIVATE_KEY" > "$HOME/.ssh/id_ed25519"
+        chmod 600 "$HOME/.ssh/id_ed25519"
+
+        printf '%s\n' "$SSH_KNOWN_HOSTS" > "$HOME/.ssh/known_hosts"
+        chmod 600 "$HOME/.ssh/known_hosts"
+
+    - name: Ejecutar despliegue remoto
+      shell: bash
+      env:
+        DEPLOY_HOST: ${{ inputs.host }}
+        DEPLOY_USER: ${{ inputs.user }}
+        DEPLOY_SCRIPT: ${{ inputs.deploy-script }}
+        COMMIT_SHA: ${{ inputs.commit-sha }}
+      run: |
+        set -euo pipefail
+
+        ssh \
+          -i "$HOME/.ssh/id_ed25519" \
+          -o IdentitiesOnly=yes \
+          "${DEPLOY_USER}@${DEPLOY_HOST}" \
+          "${DEPLOY_SCRIPT} '${COMMIT_SHA}'"