resolve gitleaks from PATH in PowerShell collector

Author: saiganakato

CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to this regulation shelf are documented here.
 
 The detailed shelf changelog lives in `regulation/shelf/SHELF_CHANGELOG.md`.
 
+## [1.2.4] - 2026-06-18
+
+### Fixed
+
+- PowerShell collector now resolves `gitleaks` from `PATH`, including CI-installed `go install` binaries, before declaring the tool unavailable.
+
 ## [1.2.3] - 2026-06-18
 
 ### Fixed

README.md

@@ -2,7 +2,7 @@
 
 Status: Active
 
-Shelf version: `1.2.3` (`regulation/shelf/SHELF_VERSION.md`)
+Shelf version: `1.2.4` (`regulation/shelf/SHELF_VERSION.md`)
 
 ## What This Repository Is
 

regulation/shelf/SHELF_CHANGELOG.md

@@ -1,5 +1,11 @@
 # Shelf Changelog
 
+## 1.2.4 - 2026-06-18
+
+### Fixed
+
+- PowerShell collector now resolves `gitleaks` from `PATH`, including CI-installed `go install` binaries, before declaring the tool unavailable.
+
 ## 1.2.3 - 2026-06-18
 
 ### Fixed

regulation/shelf/SHELF_VERSION.md

@@ -5,7 +5,7 @@ Status: Active
 ## Current
 
 ```text
-1.2.3
+1.2.4
 ```
 
 ## Meaning

scripts/collect-audit-evidence.ps1

@@ -34,6 +34,22 @@ function Convert-ToGitBashPath {
 }
 
 function Resolve-GitleaksCommand {
+    foreach ($commandName in @("gitleaks", "gitleaks.exe")) {
+        $command = Get-Command $commandName -ErrorAction SilentlyContinue
+        if ($command -and $command.Source -and (Test-Path -LiteralPath $command.Source)) {
+            return $command.Source
+        }
+    }
+
+    $whereOutput = & where.exe gitleaks 2>$null
+    if ($LASTEXITCODE -eq 0) {
+        foreach ($path in $whereOutput) {
+            if ($path -and (Test-Path -LiteralPath $path)) {
+                return $path
+            }
+        }
+    }
+
     $candidates = @(
         (Join-Path $env:LOCALAPPDATA "Microsoft\WinGet\Packages\Gitleaks.Gitleaks_Microsoft.Winget.Source_8wekyb3d8bbwe\gitleaks.exe"),
         (Join-Path $env:USERPROFILE "AppData\Local\Microsoft\WinGet\Packages\Gitleaks.Gitleaks_Microsoft.Winget.Source_8wekyb3d8bbwe\gitleaks.exe"),