ADDITIONAL SYSTEM INFORMATION :
I'm running on macOS 12.0.1 (Monterey) on a MacBook Pro and running OpenJDK 17

A DESCRIPTION OF THE PROBLEM :
I'm actually having the exact same issue as previously reported here:
https://bugs.java.com/bugdatabase/view_bug.do?bug_id=8254662
This bug was closed as not reproducible. But I'm seeing this exact behavior with the 'dmg' I created with JDK 17: I can run the dmg locally to install the app in /Applications and subsequently run it. But if I upload that same dmg to a web site and then re-download it, I can still install into /Appliations, but when I run the app, macOS tells me it's damaged and only lets me move it to the trash.

STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
See the previously opened ticket. The 'jpackage' command I used myself is:
jpackage --name SATriage --app-version 1.0.0 --icon /Users/twolf/spectare/git/swing_app/src/com/spectare/gui/images/bigLogo.icns --input ./ --main-jar swing_app.jar

EXPECTED VERSUS ACTUAL BEHAVIOR :
EXPECTED -
The above command creates a SATriage-1.0.0.dmg file. If I upload this to the web and subsequently download it and run it, I expect it to still install SATriage.app into /Applications folder and that I can still run the .app thereafter. But I get an error.
ACTUAL -
When I try to run the app, I get an error dialog that says "SATriage.app" is damaged and can't be opened. You should move it to the Trash".

CUSTOMER SUBMITTED WORKAROUND :
Removing attributes from the app lets the application run:
sudo xattr -cr /Applications/XXX.app
But this is not a good workaround as it probably has side effects.