diff --git a/script/qa-code-coverage.sh b/script/qa-code-coverage.sh
index 95b79f8..95cc32f 100644
--- a/script/qa-code-coverage.sh
+++ b/script/qa-code-coverage.sh
@@ -171,6 +171,25 @@
                   }
               ]
 EOM
+elif [ "$PROJECT" = "HAFNIUM" ]; then
+      read -r -d '' scm_sources << EOM
+              [
+                  {
+                  "type": "git",
+                  "URL":  "$CC_TRUSTED_FIRMWARE_URL",
+                  "COMMIT": "$CC_TRUSTED_FIRMWARE_COMMIT",
+                  "REFSPEC": "$CC_TRUSTED_FIRMWARE_REFSPEC",
+                  "LOCATION": "trusted_firmware"
+                  },
+                  {
+                  "type": "git",
+                  "URL":  "$CC_SPM_URL",
+                  "COMMIT": "$CC_SPM_COMMIT",
+                  "REFSPEC": "$CC_SPM_REFSPEC",
+                  "LOCATION": "spm"
+                  }
+              ]
+EOM
   else
       echo "SCM sources not provided for project '${PROJECT}'"
       exit 1