diff --git a/gitleaks.toml b/gitleaks.toml
index ac69c23..ca4344a 100644
--- a/gitleaks.toml
+++ b/gitleaks.toml
@@ -61,4 +61,7 @@ regexes = [
     'sk-abcdefghijklmnopqrstuvwxyz',
     'your-forgejo-api-token-here',
     'your-[a-z\-]+-here',
+    # Python private function/variable on RHS — token = _some_func() is not a secret
+    '=\s+_[a-z_]{10,}',
 ]
+regexTarget = "match"