diff --git a/.github/renovate.json b/.github/renovate.json
index 8c4946738c..980266d991 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -81,7 +81,14 @@
       "matchStrings": ["ARG DOCKER_VERSION=(?<currentValue>.*?)\n"],
       "depNameTemplate": "docker",
       "datasourceTemplate": "docker"
+    },
+    {
+      "fileMatch": ["src/test/java/plugins/OicAuthPluginTest.java"],
+      "matchStrings": [".* KEYCLOAK_IMAGE=\"(?<repo>.*?):(?<currentValue>.*?)@(?<currentDigest>sha256:.*?)\";\n"],
+      "depNameTemplate": "{{{repo}}}",
+      "datasourceTemplate": "docker"
     }
+
   ],
   "customDatasources": {
     "firefox": {
diff --git a/src/test/java/plugins/OicAuthPluginTest.java b/src/test/java/plugins/OicAuthPluginTest.java
index 9984862d48..11bb61f9a1 100644
--- a/src/test/java/plugins/OicAuthPluginTest.java
+++ b/src/test/java/plugins/OicAuthPluginTest.java
@@ -42,8 +42,10 @@ public class OicAuthPluginTest extends AbstractJUnitTest {
     private static final String REALM = "test-realm";
     private static final String CLIENT = "jenkins";
 
+    private static final String KEYCLOAK_IMAGE="keycloak/keycloak:25.0.4@sha256:bf788a3b7fd737143f98d4cb514cb9599c896acee01a26b2117a10bd99e23e11";
+
     @Rule
-    public KeycloakContainer keycloak = new KeycloakContainer();
+    public KeycloakContainer keycloak = new KeycloakContainer(KEYCLOAK_IMAGE);
 
     @Inject
     public KeycloakUtils keycloakUtils;