Merge pull request #174 from jc-berger/HACDOCS-354-creating-secrets

added doc on creating secrets for builds

Author: jc-berger

docs/modules/ROOT/nav-how-to-guides.adoc

@@ -3,6 +3,7 @@
 ** Configuring your builds
 *** xref:how-to-guides/configuring-builds/proc_upgrade_build_pipeline.adoc[Upgrading to a custom build pipeline]
 *** xref:how-to-guides/configuring-builds/proc_customize_build_pipeline.adoc[Customizing the pipeline] 
+*** xref:how-to-guides/configuring-builds/proc_creating-secrets-for-your-builds.adoc[Creating secrets for your builds]
 *** xref:how-to-guides/proc_hermetic-builds.adoc[Enabling hermetic builds]
 *** xref:how-to-guides/proc_prefetching-dependencies-to-support-hermetic-build.adoc[Prefetching package manager dependencies for hermetic build]
 ** Testing your application

docs/modules/ROOT/pages/how-to-guides/configuring-builds/proc_creating-secrets-for-your-builds.adoc

@@ -0,0 +1,13 @@
+= Creating secrets for your builds 
+
+When you build your application, create secrets to ensure the `sast_snyk_task` works. The `sast_snyk_task` analyzes your source code to find vulnerabilities. The `sast_synk_task` secret defines parameters for your build pipeline. Add these `sast_snyk_task` secrets to your build pipeline to ultimately help build and deploy your application. 
+
+.Procedure 
+
+. In the {ProductName}, go to the *Components* tab of your application.
+. Select the three dots next to the component you want to configure, and select *Edit component settings*. 
+. Under *Secrets*, click *Add secret*. The secret modal opens and is called, *Create new build secret*.
+. Under *Select or enter name*, use the predefined `snyk_secret` or create a custom secret. 
+. Fill in the *Key* and *Value* fields. 
+. Click *Create*. The secret modal closes. 
+. In the {ProductName}, click *Save*.