diff --git a/codex-rs/secrets/BUILD.bazel b/codex-rs/secrets/BUILD.bazel
new file mode 100644
index 0000000000..1b69e7c7e0
--- /dev/null
+++ b/codex-rs/secrets/BUILD.bazel
@@ -0,0 +1,6 @@
+load("//:defs.bzl", "codex_rust_crate")
+
+codex_rust_crate(
+    name = "secrets",
+    crate_name = "codex_secrets",
+)