added doc on creating secrets for builds

Author: jc-berger

docs/modules/ROOT/nav-how-to-guides.adoc

@@ -3,6 +3,7 @@
 ** Configuring your builds
 *** xref:how-to-guides/configuring-builds/proc_upgrade_build_pipeline.adoc[Upgrading to a custom build pipeline]
 *** xref:how-to-guides/configuring-builds/proc_customize_build_pipeline.adoc[Customizing the pipeline] 
+*** xref:how-to-guides/configuring-builds/proc_creating-secrets-for-your-builds.adoc[Creating secrets for your builds]
 *** xref:how-to-guides/proc_hermetic-builds.adoc[Enabling hermetic builds]
 *** xref:how-to-guides/proc_prefetching-dependencies-to-support-hermetic-build.adoc[Prefetching package manager dependencies for hermetic build]
 ** Testing your application

docs/modules/ROOT/pages/how-to-guides/configuring-builds/proc_creating-secrets-for-your-builds.adoc

@@ -0,0 +1,12 @@
+= Creating secrets for your builds 
+
+When you build your application, create secrets to ensure the `sast_synk_task` works. The `sast_synk_task` analyzes your source code to find vulnerabilities. The `sast_synk_task` secret defines parameters for your build pipeline. Add build time secrets to use in the build pipeline. These build time secrets in the build pipeline ultimately help build and deploy your application. 
+
+.Procedure 
+
+. In the {ProductName}, go to *Applications* > *Application details* > *Components* > *Build & deploy configuration*.  
+. Under *Secrets*, click *Add secret*. The secret modal opens and is called, *Create new build secret*.
+. Under *Select or enter name*, use the predefined `synk_secret` or create a custom secret. 
+. Fill in the *Key* and *Value* fields. 
+. Click *Create*. The secret modal closes. 
+. In the {ProductName}, click *Save*.