Terms of Use — Runner Images

Effective date: 2026-04-29

1. Parties

• Publisher: 3SR, 228 Boulevard de la République, 33510 Andernos-les-Bains, France
• Customer: the entity that deploys Runner Images from Microsoft Commercial Marketplace

2. License grant

3SR grants the Customer a non-exclusive, non-transferable, revocable license to receive runner image versions from 3SR's central Compute Gallery into the Customer's gallery deployed by the Managed Application, for the duration of the Marketplace subscription.

The image content itself is composed of open-source operating system distributions (Canonical Ubuntu LTS, Microsoft Windows Server) and freely redistributable build tools as packaged by the upstream actions/runner-images open-source repository. Customer use is subject to each component's own license terms.

3. Pricing and billing

Billing is handled by Microsoft Commercial Marketplace. 3SR does not invoice the Customer directly.

4. Software components deployed

By installing, the Customer authorizes 3SR to deploy the following resources in a Managed Resource Group within their Azure subscription:

• Azure Compute Gallery (name customizable at install, default devops_img_gallery)
• 4 image definitions: runner-ubuntu-2204 (Gen1 + Gen2), runner-windows-2022 (Gen1 + Gen2)
• An Azure RBAC role assignment granting 3SR's distribution Service Principal (AppId 7372b3fa-2250-4fdb-a127-294b5531f77b) the Contributor role on the Managed Resource Group, scoped to operations on the Compute Gallery (publishing image versions, listing existing definitions).

Resources are tagged devOpsRepo: Runner-Images. The Managed Resource Group is read-only locked (lockLevel: ReadOnly).

5. Admin consent — pre-requisite

For 3SR to publish image versions into the Customer's gallery, the Customer must grant administrative consent to 3SR's multi-tenant Service Principal 3SR-Runner-Images-Gallery (AppId 7372b3fa-2250-4fdb-a127-294b5531f77b) in the Customer's Microsoft Entra ID directory.

The consent URL is provided in the post-deployment view of the Managed Application (Overview tab). Without this consent, the Compute Gallery deployed in the managed RG remains empty — no image versions can be distributed.

The Customer may revoke this consent at any time via Microsoft Entra ID portal → Enterprise Applications. Revocation stops image distribution but does not affect images already present in the Customer's gallery.

6. Distribution schedule

• 3SR runs a build + distribution pipeline weekly (every 7 days) on Mondays at 12:00 UTC
• New image versions are produced weekly from the upstream actions/runner-images Packer scripts
• After each successful build, the new versions are copied to all Customers with valid admin consent
• 3SR retains image versions for 90 days in its central gallery; Customers receive each version once and the version remains in their gallery until they manually delete it

7. Customer's obligations

• Ensure the deploying user has Owner or Contributor on the target subscription
• Grant and maintain the admin consent described in §5
• Provide a contact email for distribution notifications
• Not modify or delete the resources in the Managed Resource Group (locked ReadOnly)
• Comply with the licenses of upstream OS and tools embedded in the images (Canonical Ubuntu, Microsoft Windows Server, GitHub Actions Runner, etc.)
• Comply with Microsoft Azure Terms of Service

8. Service Level Agreement (SLA)

• Image build cadence: weekly (every 7 days), best-effort. In case of upstream Packer build failure, 3SR investigates and reruns within 1-2 business days.
• Distribution lead time after successful 3SR build: typically < 1 hour (parallel copy to all consenting Customers)
• Support response: < 24 business hours (FR/EN), 9h-18h CET, lun-ven

Note: image content (specific tools, versions of .NET, Node, etc.) tracks the upstream actions/runner-images manifest. 3SR does not alter the manifest. Compatibility issues caused by upstream changes are not under 3SR's SLA.

9. Limitation of liability

3SR's liability is capped at the lower of total fees paid by the Customer over the 12 months preceding the incident, or 10 000 EUR. 3SR is not liable for damages caused by upstream Packer scripts, by Microsoft Azure infrastructure incidents, or by changes in the embedded tools' behavior.

10. Termination

The Customer may terminate at any time by uninstalling the Managed Application. 3SR may terminate with 60 days notice. After termination, 3SR removes the Customer from its distribution list. Image versions already in the Customer's gallery remain — the Customer may delete them or keep them for further use, with the understanding that they will not receive further updates.

11. Data

Refer to the Privacy Policy.

12. Governing law

French law. Disputes submitted to the courts of Bordeaux, France.

13. Contact

3SR — support@3sr.fr · https://3sr.fr