slug: docker provider: Docker generated_by: planning/capability-mapping/scripts/classify_capabilities.py model: claude-opus-5 frame: - Software & Technology min_confidence: 0.7 capability_model: source: https://github.com/vincentmakes/turbo-ea-capabilities license: CC-BY-4.0 attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities, CC BY 4.0 notice: NOTICE edge_count: 1 edges: - tag: Secret spec_file: docker-secret-api-openapi.yml capability_id: BC-4210.60 capability_id_l1: BC-4210 capability_name: Configuration & Secrets Management confidence: 0.75 evidence: POST /secrets/create SecretCreate Create a secret; GET /secrets/{id} SecretInspect Inspect a secret; schemas Secret, SecretSpec, Driver reason: CRUD over secrets consumed by running services matches 'Management of runtime configuration values and secrets consumed by product services'. Slight ambiguity versus a generic IAM reading, but these are deployment-time secret objects, not identities.