feat: documentation for docker-pass CLI plugin

Author: joe0BAB

content/reference/cli/docker/pass.md

@@ -0,0 +1,10 @@
+---
+datafolder: secrets-engine
+datafile: docker_pass
+title: docker pass
+layout: cli
+aliases:
+- /engine/reference/commandline/pass/
+---
+
+{{< summary-bar feature_name="Docker Pass" >}}

data/secrets-engine/docker_pass.yaml

@@ -0,0 +1,66 @@
+command: docker pass
+short: Manage your local OS keychain secrets.
+long: |-
+  Docker Pass is a helper that allows you to store secrets securely in your local OS keychain and inject them into containers later.
+  
+  On Windows: Uses the Windows Credential Manager API.
+  
+  On macOS: Uses macOS Keychain services API.
+  
+  On Linux: `org.freedesktop.secrets` API (requires DBus + gnome-keyring/kdewallet to be installed).
+
+
+usage: docker pass set|get|ls|rm
+pname: docker
+plink: docker.yaml
+cname:
+  - docker pass set
+  - docker pass get
+  - docker pass ls
+  - docker pass rm
+clink:
+  - docker_pass_set.yaml
+  - docker_pass_get.yaml
+  - docker_pass_ls.yaml
+  - docker_pass_rm.yaml
+deprecated: false
+experimental: true
+experimentalcli: true
+kubernetes: false
+swarm: false
+examples: |-
+  ### Using keychain secrets in containers
+  
+  Create a secret:
+  
+  ```console
+  $ docker pass set GH_TOKEN=123456789
+  ```
+  
+  Creating a secret from STDIN:
+  
+  ```console
+  echo 123456789 > token.txt
+  cat token.txt | docker pass set GH_TOKEN
+  ```
+  
+  Run a container that uses the secret:
+  
+  ```console
+  $ docker run -e GH_TOKEN= -dt --name demo busybox
+  ```
+  
+  Inspect your secret from inside the container
+  
+  ```console
+  $ docker debug demo
+  ...
+  docker > echo $GH_TOKEN
+  123456789
+  ```
+  
+  Explicitly assigning a secret to another environment variable:
+  
+  ```console
+  $ docker run -e GITHUB_TOKEN=se://GH_TOKEN -dt --name demo busybox
+  ```

data/secrets-engine/docker_pass_get.yaml

@@ -0,0 +1,11 @@
+command: docker pass get
+short: Get a secret
+usage: docker pass get <name>
+pname: docker pass
+plink: docker_pass.yaml
+deprecated: false
+hidden: false
+experimental: true
+experimentalcli: true
+kubernetes: false
+swarm: false

data/secrets-engine/docker_pass_ls.yaml

@@ -0,0 +1,11 @@
+command: docker pass ls
+short: List secrets
+usage: docker pass ls
+pname: docker pass
+plink: docker_pass.yaml
+deprecated: false
+hidden: false
+experimental: true
+experimentalcli: true
+kubernetes: false
+swarm: false

data/secrets-engine/docker_pass_rm.yaml

@@ -0,0 +1,11 @@
+command: docker pass rm
+short: Remove a secret
+usage: docker pass rm <name>
+pname: docker pass
+plink: docker_pass.yaml
+deprecated: false
+hidden: false
+experimental: true
+experimentalcli: true
+kubernetes: false
+swarm: false

data/secrets-engine/docker_pass_set.yaml

@@ -0,0 +1,16 @@
+command: docker pass set
+short: Set a secret
+usage: docker pass set <name>=<value>
+long: |-
+  Secrets can also be created from STDIN:
+  ```console
+  <some command> | docker pass set <name>
+  ```
+pname: docker pass
+plink: docker_pass.yaml
+deprecated: false
+hidden: false
+experimental: true
+experimentalcli: true
+kubernetes: false
+swarm: false

data/summary.yaml

@@ -182,6 +182,9 @@ Docker MCP Catalog:
   availability: Beta
 Docker MCP Toolkit:
   availability: Beta
+Docker Pass:
+  requires: Docker Desktop 4.54 and later
+  availability: Beta
 Docker Projects:
   availability: Beta
 Docker Sandboxes: