diff --git a/eclair/external_sources.ecl b/eclair/external_sources.ecl
index 13ba7ca..463504b 100644
--- a/eclair/external_sources.ecl
+++ b/eclair/external_sources.ecl
@@ -14,9 +14,20 @@
 -file_tag+={external, "^qcbor/.*$"}
 -file_tag+={external, "^trusted-firmware-m/platform/ext/cmsis/.*$"}
 -file_tag+={external, "^trusted-firmware-m/lib/ext/mbedcrypto/.*$"}
+-file_tag+={external, "^trusted-firmware-m/lib/ext/cryptocell-312-runtime/.*$"}
+-file_tag+={external, "^trusted-firmware-m/lib/ext/t_cose/.*$"}
 
 # Ignore any auto-generated source files in build dir.
+# TODO make an exception for build/generated, in which source code is
+# built in TF-M binaries.
 -file_tag+={external, "^trusted-firmware-m/build/.*$"}
 
 # Ignore compiler internal headers.
 -file_tag+={external, "^/.+/compiler/gcc-.*$"}
+
+# Ignore tf-m-tests. Source code under tf-m-tests will not be included
+# in production release.
+-file_tag+={external, "^tf-m-tests/.*$"}
+
+# Ignore vendor platform specific soure code
+-file_tag+={external, "^trusted-firmware-m/platform/ext/platform/.*$"}