scan-copyrights provides different results on different runs

Background

In some repositories, each different run of scan-copyrights provides a different outcome.

• pkg/rustc!19 (merged)
• pkg/qemu!79 (merged)
• pkg/golang-github-azure-azure-sdk-for-go!2 (merged)

Reproducibility

How often the issue is hit when repeating the steps to reproduce and changing nothing?

Put the ✅ in the most appropriate entry:

1. always
2. ✅ often, but not always
3. rarely

Impact of bug

This issue makes our pipelines to generate lots of useless commits, which create conflicts and make it impossible to have a stable version of the package.

Outcomes

TBD

Management data

This section is for management only, it should be the last one in the description.

/cc @em @balasubramanian @sudarshan @wlozano

Phabricator link: https://phabricator.apertis.org/T11010