Add reference documentation for 'ignored_advisories' in the pubspec

src/tools/pub/pubspec.md

@@ -96,7 +96,7 @@ A pubspec can have the following fields:
 
 `ignored_advisories`
 : Optional. List of ignored security advisories.
-  [_Learn more._](/tools/pub/security-advisories)
+  [_Learn more._](#ignored_advisories)
 
 Pub ignores all other fields.
 
@@ -449,6 +449,28 @@ Pub.dev requires topics to follow these specifications:
 When choosing topics, consider if [existing topics]({{site.pub}}/topics)
 are relevant. Tagging with existing topics helps users discover your package.
 
+### Ignored_advisories
+
+If a package has a dependency that is affected by a security advisory,
+pub warns about the advisory during dependency resolution.
+Package authors can use the `ignored_advisories` field as an allowlist
+of triggered advisories that are not relevant for the package.
+
+To suppress the warning about an advisory,
+add the advisory identifier to the `ignored_advisories` list.
+For example:
+
+```yaml
+name: myapp
+dependencies:
+  foo: ^1.0.0
+ignored_advisories:
+ - GHSA-4rgh-jx4f-qfcq
+```
+
+For more information, check out
+[Security advisories](/tools/pub/security-advisories).
+
 ### SDK constraints
 
 A package can indicate which versions of its dependencies it supports, but