diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index cc9aff985a269269b00f24dfd06b3250cbf8bfc3..c89bbd30b98573fa050bcf1dcdd434ab7a414576 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -40,7 +40,10 @@ jobs:
     - name: "Install ZKAPAuthorizer and dependencies"
       run: |
         # Get a Python 2 compatible version of setuptools_scm so that pip
-        # doesn't install a Python 2 incompatible version for cbor2.
+        # doesn't install a Python 2 incompatible version for cbor2.  There's
+        # always a chance cbor2 will help us out with a 5.2.1 that declares
+        # the constraint for us:
+        # https://github.com/agronholm/cbor2/issues/124
         pip install setuptools_scm<6
         python -m pip install -v ./[test]