diff --git a/cmd/docker-buildx/config.go b/cmd/docker-buildx/config.go
index 05705f3..9e56a4e 100644
--- a/cmd/docker-buildx/config.go
+++ b/cmd/docker-buildx/config.go
@@ -183,6 +183,12 @@ func settingsFlags(settings *plugin.Settings) []cli.Flag {
 			Usage:       "forwards environment variables as custom arguments to the build",
 			Destination: &settings.Build.ArgsEnv,
 		},
+		&cli.StringSliceFlag{
+			Name:        "secrets",
+			EnvVars:     []string{"PLUGIN_SECRETS"},
+			Usage:       "sets custom secret arguments for the build",
+			Destination: &settings.Build.Secrets,
+		},
 		&cli.BoolFlag{
 			Name:        "quiet",
 			EnvVars:     []string{"PLUGIN_QUIET"},
diff --git a/docs.md b/docs.md
index 3f8ce32..b7e2e0d 100644
--- a/docs.md
+++ b/docs.md
@@ -8,6 +8,7 @@ containerImage: woodpeckerci/plugin-docker-buildx
 containerImageUrl: https://hub.docker.com/r/woodpeckerci/plugin-docker-buildx
 url: https://codeberg.org/woodpecker-plugins/docker-buildx
 ---
+
 Woodpecker CI plugin to build multiarch Docker images with buildx. This plugin is a fork of [thegeeklab/drone-docker-buildx](https://github.com/thegeeklab/drone-docker-buildx/) which itself is a fork of [drone-plugins/drone-docker](https://github.com/drone-plugins/drone-docker).
 
 ## Features
@@ -27,9 +28,8 @@ It will automatically generate buildkit configuration to use custom CA certifica
 
 ## Settings
 
-
 | Settings Name           | Default                       | Description                                        |
-| ------------------------- | ------------------------------- | ---------------------------------------------------- |
+| ----------------------- | ----------------------------- | -------------------------------------------------- |
 | `dry-run`               | `false`                       | disables docker push                               |
 | `repo`                  | _none_                        | sets repository name for the image (can be a list) |
 | `username`              | _none_                        | sets username to authenticates with                |
@@ -91,9 +91,8 @@ docker-build:
 
 ## Advanced Settings
 
-
 | Settings Name                       | Default           | Description                                                                                                                                       |
-| ------------------------------------- | ------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------- |
+| ----------------------------------- | ----------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- |
 | `mirror`                            | _none_            | sets a registry mirror to pull images                                                                                                             |
 | `storage_driver`                    | _none_            | sets the docker daemon storage driver                                                                                                             |
 | `storage_path`                      | `/var/lib/docker` | sets the docker daemon storage path                                                                                                               |
@@ -118,6 +117,7 @@ docker-build:
 | `default_labels`/`auto_labels`      | `true`            | sets docker image labels based on git information                                                                                                 |
 | `build_args`                        | _none_            | sets custom build arguments for the build                                                                                                         |
 | `build_args_from_env`               | _none_            | forwards environment variables as custom arguments to the build                                                                                   |
+| `secrets`                           | _none_            | Sets the build secrets for the build                                                                                                              |
 | `quiet`                             | `false`           | enables suppression of the build output                                                                                                           |
 | `target`                            | _none_            | sets the build target to use                                                                                                                      |
 | `cache_from`                        | _none_            | sets configuration for cache source                                                                                                               |
diff --git a/plugin/docker.go b/plugin/docker.go
index e966b37..4b82743 100644
--- a/plugin/docker.go
+++ b/plugin/docker.go
@@ -94,6 +94,9 @@ func commandBuild(build Build, dryrun bool) *exec.Cmd {
 	for _, arg := range append(defaultBuildArgs, build.Args.Value()...) {
 		args = append(args, "--build-arg", arg)
 	}
+	for _, secret := range build.Secrets.Value() {
+		args = append(args, "--secret", secret)
+	}
 	for _, host := range build.AddHost.Value() {
 		args = append(args, "--add-host", host)
 	}
diff --git a/plugin/impl.go b/plugin/impl.go
index 563d03d..55708bf 100644
--- a/plugin/impl.go
+++ b/plugin/impl.go
@@ -69,6 +69,7 @@ type Build struct {
 	Platforms       cli.StringSlice // Docker build target platforms
 	Args            cli.StringSlice // Docker build args
 	ArgsEnv         cli.StringSlice // Docker build args from env
+	Secrets         cli.StringSlice // Docker build secret
 	Target          string          // Docker build target
 	Output          string          // Docker build output
 	Pull            bool            // Docker build pull