diff --git a/ansible/README.md b/ansible/README.md
index 235291e61..da81c8c0b 100644
--- a/ansible/README.md
+++ b/ansible/README.md
@@ -175,6 +175,8 @@ Unsorted stuff of things we need to do/think about
 - [ ] add explicit ARCH and DESTCPU for release machines (RV: I'm adding
       "arm64" manually for both to force the right thing, from memory I've
       needed to do this on x86 and x64, best be explicit to be sure)
+- [ ] github-bot: automate list of whitelisted Jenkins worker IPs with
+      python
 
 [callback]: plugins/inventory/nodejs_yaml.py