diff --git a/.renovaterc.json b/.renovaterc.json
new file mode 100644
index 000000000..2b6699fb1
--- /dev/null
+++ b/.renovaterc.json
@@ -0,0 +1,11 @@
+{
+  "regexManagers": [
+    {
+      "fileMatch": ["^tools/build_test_env.sh$"],
+      "matchStrings": ["DEFAULT_GITLAB_TAG=(?<currentValue>.*?)\n"],
+      "depNameTemplate": "gitlab/gitlab-ce",
+      "datasourceTemplate": "docker",
+      "versioningTemplate": "loose"
+    }
+  ]
+}
diff --git a/tools/build_test_env.sh b/tools/build_test_env.sh
index adab24d11..413711152 100755
--- a/tools/build_test_env.sh
+++ b/tools/build_test_env.sh
@@ -28,8 +28,10 @@ try() { "$@" || fatal "'$@' failed"; }
 REUSE_CONTAINER=
 NOVENV=
 API_VER=4
-GITLAB_IMAGE="${GITLAB_IMAGE:-gitlab/gitlab-ce}"
-GITLAB_TAG="${GITLAB_TAG:-latest}"
+DEFAULT_GITLAB_IMAGE=gitlab/gitlab-ce
+DEFAULT_GITLAB_TAG=13.3.0-ce.1
+GITLAB_IMAGE="${GITLAB_IMAGE:-$DEFAULT_GITLAB_IMAGE}"
+GITLAB_TAG="${GITLAB_TAG:-$DEFAULT_GITLAB_TAG}"
 VENV_CMD="python3 -m venv"
 while getopts :knp:a:i:t: opt "$@"; do
     case $opt in