diff --git a/tox.ini b/tox.ini
index d3ea4f947d..e1ab88eef1 100644
--- a/tox.ini
+++ b/tox.ini
@@ -16,7 +16,7 @@ changedir = tests
 commands =
     python --version
     python -m coverage run aggregate_tests.py
-    python -m coverage report -m --fail-under 97
+    python -m coverage report -m --fail-under 97 --omit "{toxinidir}/tuf/ngclient/*"
 
 deps =
     -r{toxinidir}/requirements-test.txt
@@ -42,12 +42,12 @@ commands =
 commands =
     # Use different configs for new (tuf/api/*) and legacy code
     # TODO: configure black and isort args in pyproject.toml (see #1161)
-    black --check --diff --line-length 80 {toxinidir}/tuf/api
-    isort --check --diff --line-length 80 --profile black -p tuf {toxinidir}/tuf/api
-    pylint {toxinidir}/tuf/api --rcfile={toxinidir}/tuf/api/pylintrc
+    black --check --diff --line-length 80 {toxinidir}/tuf/api {toxinidir}/tuf/ngclient
+    isort --check --diff --line-length 80 --profile black -p tuf {toxinidir}/tuf/api {toxinidir}/tuf/ngclient
+    pylint {toxinidir}/tuf/api {toxinidir}/tuf/ngclient --rcfile={toxinidir}/tuf/api/pylintrc
 
     # NOTE: Contrary to what the pylint docs suggest, ignoring full paths does
     # work, unfortunately each subdirectory has to be ignored explicitly.
-    pylint {toxinidir}/tuf --ignore={toxinidir}/tuf/api,{toxinidir}/tuf/api/serialization
+    pylint {toxinidir}/tuf --ignore={toxinidir}/tuf/api,{toxinidir}/tuf/api/serialization,{toxinidir}/tuf/ngclient,{toxinidir}/tuf/ngclient/_internal
 
     bandit -r {toxinidir}/tuf