diff --git a/.changeset/grant-license-exceptions-gh-aw-firewall-agent.md b/.changeset/grant-license-exceptions-gh-aw-firewall-agent.md
new file mode 100644
index 00000000000..bc974108924
--- /dev/null
+++ b/.changeset/grant-license-exceptions-gh-aw-firewall-agent.md
@@ -0,0 +1,5 @@
+---
+"gh-aw": patch
+---
+
+Document license policy exceptions in `.grant.yaml` for the Ubuntu 22.04 base OS packages shipped by `ghcr.io/github/gh-aw-firewall/agent`, resolving the license policy violations reported by the container image security scan for that image.
diff --git a/.grant.yaml b/.grant.yaml
index bfabb7af1ab..6b15f7e1251 100644
--- a/.grant.yaml
+++ b/.grant.yaml
@@ -10,8 +10,9 @@ allow:
   - ISC
 
 # Base OS packages of upstream container images that gh-aw executes (Alpine
-# variants of the MCP server and runtime images, plus the Debian-based
-# ghcr.io/github/github-mcp-server image) and the Node/npm runtime those
+# variants of the MCP server and runtime images, the Debian-based
+# ghcr.io/github/github-mcp-server image, and the Ubuntu 22.04 based
+# ghcr.io/github/gh-aw-firewall/agent image) and the Node/npm runtime those
 # images ship. These packages come with the upstream base image, are never linked
 # into or redistributed with gh-aw, and are therefore accepted as a documented
 # policy exception. The allowlist above still applies to every other package in
@@ -105,3 +106,186 @@ ignore-packages:
   - spdx-license-ids
   - tar
   - yallist
+  # Ubuntu 22.04 base OS (ghcr.io/github/gh-aw-firewall/agent)
+  - adduser
+  - apt
+  - base-passwd
+  - bind9-dnsutils
+  - bind9-host
+  - bind9-libs
+  - bsdutils
+  - coreutils
+  - curl
+  - dash
+  - debianutils
+  - diffutils
+  - dirmngr
+  - dnsutils
+  - dpkg
+  - e2fsprogs
+  - findutils
+  - fontconfig-config
+  - fonts-dejavu-core
+  - gcc-12-base
+  - git-man
+  - gnupg
+  - gnupg-l10n
+  - gnupg-utils
+  - gpg-wks-client
+  - gpg-wks-server
+  - gpgconf
+  - gpgv
+  - grep
+  - gzip
+  - hostname
+  - init-system-helpers
+  - iptables
+  - libacl1
+  - libapt-pkg6.0
+  - libassuan0
+  - libattr1
+  - libaudit-common
+  - libaudit1
+  - libblkid1
+  - libbsd0
+  - libbz2-1.0
+  - libc-bin
+  - libcairo2
+  - libcap-ng0
+  - libcap2-bin
+  - libcom-err2
+  - libcrypt1
+  - libcurl3-gnutls
+  - libcurl4
+  - libdeflate0
+  - liberror-perl
+  - libev-dev
+  - libev4
+  - libexif12
+  - libext2fs2
+  - libfontconfig1
+  - libfreetype6
+  - libgcc-s1
+  - libgcrypt20
+  - libgd3
+  - libgdbm-compat4
+  - libgdbm6
+  - libglib2.0-0
+  - libgmp10
+  - libgnutls30
+  - libgpg-error0
+  - libgssapi-krb5-2
+  - libhogweed6
+  - libicu70
+  - libidn2-0
+  - libip4tc2
+  - libip6tc2
+  - libjbig0
+  - libjpeg-turbo8
+  - libjpeg8
+  - libjson-c5
+  - libk5crypto3
+  - libkeyutils1
+  - libkrb5-3
+  - libkrb5support0
+  - libksba8
+  - libldap-2.5-0
+  - liblmdb0
+  - liblz4-1
+  - liblzma5
+  - libmaxminddb0
+  - libmd0
+  - libmnl0
+  - libmount1
+  - libmpdec3
+  - libncurses6
+  - libncursesw6
+  - libnetfilter-conntrack3
+  - libnettle8
+  - libnfnetlink0
+  - libnftnl11
+  - libnghttp2-14
+  - libnpth0
+  - libnsl2
+  - libp11-kit0
+  - libpam-modules
+  - libpam-modules-bin
+  - libpam-runtime
+  - libpam0g
+  - libperl5.34
+  - libpng16-16
+  - libprocps8
+  - libpsl5
+  - libpython3-stdlib
+  - libpython3.10-minimal
+  - libpython3.10-stdlib
+  - libreadline8
+  - librtmp1
+  - libsasl2-2
+  - libsasl2-modules-db
+  - libseccomp2
+  - libselinux1
+  - libsemanage-common
+  - libsemanage2
+  - libsepol2
+  - libsmartcols1
+  - libsqlite3-0
+  - libss2
+  - libssh-4
+  - libssl-dev
+  - libstdc++6
+  - libsystemd0
+  - libtasn1-6
+  - libtiff5
+  - libtinfo6
+  - libtirpc-common
+  - libtirpc3
+  - libudev1
+  - libunistring2
+  - libuuid1
+  - libuv1
+  - libx11-6
+  - libx11-data
+  - libxau6
+  - libxdmcp6
+  - libxext6
+  - libxml2
+  - libxrender1
+  - libxtables12
+  - libxxhash0
+  - libzstd1
+  - login
+  - logsave
+  - lsb-base
+  - mawk
+  - mount
+  - ncurses-base
+  - ncurses-bin
+  - net-tools
+  - openssl
+  - passwd
+  - perl
+  - perl-base
+  - perl-modules-5.34
+  - php-common
+  - php-gd
+  - php-intl
+  - php8.1-common
+  - php8.1-gd
+  - php8.1-intl
+  - pinentry-curses
+  - procps
+  - psmisc
+  - python3
+  - python3-minimal
+  - python3.10
+  - python3.10-minimal
+  - readline-common
+  - sed
+  - sensible-utils
+  - sysvinit-utils
+  - ubuntu-keyring
+  - ucf
+  - usrmerge
+  - util-linux
+  - zlib1g