TMS, TDI, TDO. Each TCK, TMS, TDI and TDO pin has a boundary-scan cell that can be used to test for shorts and stuck-at faults.