New line separated list of host mounts : type=volume|bind|tmpfs|npipe[,src|source=<some source>],dst|destination|target=<some target>[,<key>=<value>]*
For tmpfs mounts, set tmpfs-noexec=true to prevent execution from the mounted filesystem. This uses Docker's tmpfs options and can be combined with tmpfs-size, tmpfs-mode, and readonly=true.
Example: type=tmpfs,destination=/tmp,tmpfs-noexec=true,tmpfs-size=67108864,tmpfs-mode=1777
See the official documentation