diff --git a/go.mod b/go.mod
index 3904599..b273ed7 100644
--- a/go.mod
+++ b/go.mod
@@ -5,8 +5,8 @@ go 1.23.6
 toolchain go1.24.1
 
 require (
-	github.com/compliance-framework/agent v0.1.1
-	github.com/compliance-framework/configuration-service v0.1.1
+	github.com/compliance-framework/agent v0.1.5
+	github.com/compliance-framework/configuration-service v0.1.3
 	github.com/google/uuid v1.6.0
 	github.com/hashicorp/go-hclog v1.6.3
 	github.com/hashicorp/go-plugin v1.6.3
diff --git a/go.sum b/go.sum
index 2a0594b..d9dae18 100644
--- a/go.sum
+++ b/go.sum
@@ -26,8 +26,12 @@ github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UF
 github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/compliance-framework/agent v0.1.1 h1:uQ4idgwOMqrgM0JeYCtBv20HZoMymsH2nownrkl457w=
 github.com/compliance-framework/agent v0.1.1/go.mod h1:jy/26xgTx9+at64ipTV1oo80pTVyhtlZaSMViQ3cVVQ=
+github.com/compliance-framework/agent v0.1.5 h1:kKRpY1Rado4AX0m1C3+wMpDjrbxn98AdmcrmXQUBkbo=
+github.com/compliance-framework/agent v0.1.5/go.mod h1:4/NXMHo9zB8JHSDz9pXsCAaO6mzspjfL2hrWZSW2rjA=
 github.com/compliance-framework/configuration-service v0.1.1 h1:p/r5vq1FLe0S8j/kLhth4Dvda8xajVPOBjnO9QauMjM=
 github.com/compliance-framework/configuration-service v0.1.1/go.mod h1:tLKJKXbQbY9Pg/e3BJtJVkqxaejXJMHoE8Yp0NW4lDE=
+github.com/compliance-framework/configuration-service v0.1.3 h1:Gf9/v+4IAHG2iVh+gZSiboMH7tAsVBn4FtnJZZsQIrU=
+github.com/compliance-framework/configuration-service v0.1.3/go.mod h1:tLKJKXbQbY9Pg/e3BJtJVkqxaejXJMHoE8Yp0NW4lDE=
 github.com/containerd/containerd v1.7.26 h1:3cs8K2RHlMQaPifLqgRyI4VBkoldNdEw62cb7qQga7k=
 github.com/containerd/containerd v1.7.26/go.mod h1:m4JU0E+h0ebbo9yXD7Hyt+sWnc8tChm7MudCjj4jRvQ=
 github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I=
diff --git a/main.go b/main.go
index 3c35833..c28202f 100644
--- a/main.go
+++ b/main.go
@@ -230,6 +230,16 @@ func (l *AptVersion) evaluatePolicies(ctx context.Context, activities []*proto.A
 			}
 
 			newFinding := func() *proto.Finding {
+				controls := make([]*proto.ControlReference, 0)
+
+				for _, control := range result.Controls {
+					controls = append(controls, &proto.ControlReference{
+						Class:        control.Class,
+						ControlId:    control.ControlID,
+						StatementIds: control.StatementIDs,
+					})
+				}
+
 				return &proto.Finding{
 					ID:        uuid.New().String(),
 					UUID:      findingUUID.String(),
@@ -244,7 +254,7 @@ func (l *AptVersion) evaluatePolicies(ctx context.Context, activities []*proto.A
 					Subjects:            subjects,
 					Components:          components,
 					RelatedObservations: []*proto.RelatedObservation{{ObservationUUID: observation.ID}},
-					Controls:            nil,
+					Controls:            controls,
 				}
 			}