Does anyone have experience with keeping osquery up to date using chef?

Yes, I’ve been doing this for the last couple years

Should I just rebuilt the osquery every time when there’s an update?

Most people are using the already built and signed binaries that Facebook publishes.

May I ask for a link to that?

👍

Isn’t that package need to be built from source?

Nope, it's recommended to use the binaries that Facebook publishes.

I see. Thanks.