diff --git a/ci/BUILD b/ci/BUILD
new file mode 100644
index 0000000000..349767fde1
--- /dev/null
+++ b/ci/BUILD
@@ -0,0 +1 @@
+exports_files(["oracle_image"])
diff --git a/ci/build.yml b/ci/build.yml
index 90fee21435..1002a4a991 100644
--- a/ci/build.yml
+++ b/ci/build.yml
@@ -286,7 +286,7 @@ jobs:
         set -euo pipefail
         eval "$(./dev-env/bin/dade-assist)"
         docker login --username "$DOCKER_LOGIN" --password "$DOCKER_PASSWORD"
-        IMAGE=digitalasset/oracle:enterprise-19.12.0-preloaded-20210817-24-6f020d6
+        IMAGE=$(cat ci/oracle_image)
         docker pull $IMAGE
         # Cleanup stray containers that might still be running from
         # another build that didn’t get shut down cleanly.
diff --git a/ci/oracle_image b/ci/oracle_image
new file mode 100644
index 0000000000..1e86032b33
--- /dev/null
+++ b/ci/oracle_image
@@ -0,0 +1 @@
+digitalasset/oracle:enterprise-19.12.0-preloaded-20210817-24-6f020d6
diff --git a/libs-scala/oracle-testing/BUILD.bazel b/libs-scala/oracle-testing/BUILD.bazel
index fac800c53e..514f935db5 100644
--- a/libs-scala/oracle-testing/BUILD.bazel
+++ b/libs-scala/oracle-testing/BUILD.bazel
@@ -10,6 +10,9 @@ load(
 da_scala_library(
     name = "oracle-testing",
     srcs = glob(["src/main/scala/**/*.scala"]),
+    data = [
+        "//ci:oracle_image",
+    ],
     scala_deps = [
         "@maven//:org_scalactic_scalactic",
         "@maven//:org_scalatest_scalatest_core",